Re: [saag] Overview of Quantum-Resistant Cryptography

[Hannes Tschofenig <[e-mail]>]

Thanks for sharing, John & Flo.

FWIW we have also published a whitepaper on this topic and you can find it here:
https://community.arm.com/arm-research/m/resources/1002

Ciao
Hannes

From: saag <[e-mail]> On Behalf Of Florence D
Sent: Monday, December 13, 2021 2:41 PM
To: John Mattsson <john.mattsson=[e-mail]>; saag <[e-mail]>; IRTF CFRG <[e-mail]>; [e-mail]
Subject: Re: [saag] Overview of Quantum-Resistant Cryptography

Hi John,

Thanks for sharing these; I found the paper a really clear and comprehensive overview of a complex topic.  I particularly like the way that it roots the academic topics in the real world, looking at the developments in post-quantum cryptography and quantum computing alongside the realities of the timelines and the systems we are trying to secure.  The tables comparing the performance of the KEMs and signatures in round 3 of the NIST post-quantum process will be useful references for matching up NIST algorithms with applications and protocols.

People in this group might also be interested in two technical reports which were recently published by ETSI QSC (Quantum Safe Cryptography):

  *   TR 103 616 "Quantum-Safe Signatures" https://www.etsi.org/deliver/etsi_tr/103600_103699/103616/01.01.01_60/tr_103616v010101p.pdf
  *   TR 103 823 "Quantum-Safe Public Key Encryption and Key Encapsulation" https://www.etsi.org/deliver/etsi_tr/103800_103899/103823/01.01.01_60/tr_103823v010101p.pdf
These reports make a good next step after the Ericsson paper.  They aim to give concise descriptions of the schemes remaining in the NIST process, using a consistent notation to help readers understand the similarities and differences between them.

Flo
UK National Cyber Security Centre

From: saag <[e-mail]<mailto:[e-mail]>> On Behalf Of John Mattsson
Sent: 08 December 2021 09:16
To: saag <[e-mail]<mailto:[e-mail]>>; IRTF CFRG <[e-mail]<mailto:[e-mail]>>; [e-mail]<mailto:[e-mail]>
Subject: [saag] Overview of Quantum-Resistant Cryptography

You don't often get email from john.mattsson=[e-mail]<mailto:john.mattsson=[e-mail]>. Learn why this is important<http://aka.ms/LearnAboutSenderIdentification>
Hi,

We felt that there was no comprehensive and up to date overview of quantum-resistant cryptography and decided to write one. How quantum technology will affect security is an area full of snakeoil. We hope this is of interest. Comments welcome.

The full 40-page report can be found on arXiv:
"Quantum-Resistant Cryptography"
https://arxiv.org/abs/2112.00399

A shorter summary of the report can be found in Ericsson Technology Review:
"Quantum technology and its impact on security in mobile networks"
https://www.ericsson.com/en/reports-and-papers/ericsson-technology-review/articles/ensuring-security-in-mobile-networks-post-quantum

Cheers,
John
This information is exempt under the Freedom of Information Act 2000 (FOIA) and may be exempt under other UK information legislation. Refer any FOIA queries to [e-mail]<mailto:[e-mail]>. All material is UK Crown Copyright (c)
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.