Privacy

31934 readers

799 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

147

Quantum Resistance and the Signal Protocol (signal.org)

submitted 1 year ago* (last edited 1 year ago) by jokeyrhyme@lemmy.ml to c/privacy@lemmy.ml

18 comments fedilink hide all child comments

We believe that the key encapsulation mechanism we have selected, CRYSTALS-Kyber, is built on solid foundations, but to be safe we do not want to simply replace our existing elliptic curve cryptography foundations with a post-quantum public key cryptosystem. Instead, we are augmenting our existing cryptosystems such that an attacker must break both systems in order to compute the keys protecting people’s communications.

...

Our new protocol is already supported in the latest versions of Signal’s client applications and is in use for chats initiated after both sides of the chat are using the latest Signal software. In the coming months (after sufficient time has passed for everyone using Signal to update), we will disable X3DH for new chats and require PQXDH for all new chats. In parallel, we will roll out software updates to upgrade existing chats to this new protocol.

you are viewing a single comment's thread
view the rest of the comments

[–] jet@hackertalks.com 17 points 1 year ago (4 children)

A nice and reasonable approach.

I just wonder why doubling up the cyphers is the way to go? Not confident in the post-quantum cipher yet?

[–] waffle@lemmy.cafe 17 points 1 year ago

Yeah they explain it in the article.

[–] CameronDev@programming.dev 10 points 1 year ago

There was a "quantum safe" encryption scheme proposed that had a non-quantum vulnerability found in it. Perhaps they are hedging against that occuring again? The scheme was rejected in the end so didnt matter to much.

https://arstechnica.com/information-technology/2022/08/sike-once-a-post-quantum-encryption-contender-is-koed-in-nist-smackdown/

[–] jokeyrhyme@lemmy.ml 2 points 1 year ago

Google is also going with a combined approach: https://security.googleblog.com/2023/08/toward-quantum-resilient-security-keys.html

[–] sloppy_diffuser@sh.itjust.works 1 points 1 year ago

New ones are too young and not battle tested with time. Hybrid PQ is the norm until more data is available.