Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add post-quantum crypto (X25519Kyber768) to WAMP authentication (and generally) #2099

Open
oberstet opened this issue Sep 30, 2023 · 1 comment

Comments

@oberstet
Copy link
Contributor

oberstet commented Sep 30, 2023

currently, we only support (and set by default) curve25519 / ed25519. adding kyber would make sense:

https://www.ietf.org/archive/id/draft-tls-westerbaan-xyber768d00-02.html
https://blog.cloudflare.com/post-quantum-to-origins/
https://blog.chromium.org/2023/08/protecting-chrome-traffic-with-hybrid.html
https://asecuritysite.com/pqc/circl_hybrid

@oberstet oberstet changed the title Add post-quantum crypto to WAMP authentication (and generally) Add post-quantum crypto (X25519Kyber768) to WAMP authentication (and generally) Sep 30, 2023
@oberstet
Copy link
Contributor Author

oberstet commented Oct 7, 2023

maybe Kyber, maybe not (and then, Dilithium, FALCON or SPHINCS+):

"I am thus deeply sceptical of claims that Kyber-{512,768,1024} are as hard to break as AES-{128,192,256} by known attacks, never mind the risks from future attacks. I recommend that NIST withdraw those claims. Furthermore, given the considerable risk of Kyber-512 being weaker than AES-128, I recommend terminating the standardization of Kyber-512"

-- D. J. Bernstein

https://medium.com/asecuritysite-when-bob-met-alice/the-inability-to-count-correctly-d1f07741e7e7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant