----- Forwarded message from Tony Arcieri <bascule@gmail.com> ----- Date: Sat, 7 Sep 2013 15:40:08 -0700 From: Tony Arcieri <bascule@gmail.com> To: Ray Dillinger <bear@sonic.net> Cc: Crypto <cryptography@metzdowd.com> Subject: Re: [Cryptography] Why prefer symmetric crypto over public key crypto? On Sat, Sep 7, 2013 at 1:01 PM, Ray Dillinger <bear@sonic.net> wrote:

And IIRC, pretty much every asymmetric ciphersuite (including all public- key crypto) is vulnerable to some transformation of Shor's algorithm that is in fact practical to implement on such a machine.

Lattice-based (NTRU) or code-based (McEliece/McBits) public key systems are still considered "post-quantum" algorithms. There are no presently known quantum algorithms that work against these sorts of systems. See http://pqcrypto.org/ -- Tony Arcieri _______________________________________________ The cryptography mailing list cryptography@metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5