this post was submitted on 03 Jun 2024
134 points (99.3% liked)
TechTakes
1017 readers
131 users here now
Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.
For actually-good tech, you want our NotAwfulTech community
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
"the industry’s first post-quantum encryption." What the hell is post-quantum encryption?
According to NIST this is something to be developed, not something Zoom has 'all of a sudden created' in the time between that question being asked, and the time the question was answered. SMH.
If you are curious, you can read up on it: https://csrc.nist.gov/projects/post-quantum-cryptography
I thought we already had post quantum encryption, or at least that's what some articles I read claimed
Please elaborate. I'm def not up on the cutting edge of encryption. And I'd like to know more.
it means cryptography with algorithms that will be resistant to quantum computers that are any good
Thank you, I understand the goal in a broader sense, and definition. Are you aware of any methods, for instance, that Zoom, or anyone else, could actually be rolling out at this time?
This was back in 2022: https://cloud.google.com/blog/products/identity-security/why-google-now-uses-post-quantum-cryptography-for-internal-comms
But from what I understand Google claims to have rolled out an algorithm to Chrome users, I can't find the original article which lead to my first response to you, but this seems not too far from it
I saw that article when I searched DDG. Thanks, I'll give it a look. :-)
https://en.wikipedia.org/wiki/Post-quantum_cryptography
(I realize other comments downthread have already addressed some of this, no slight to others intended)
so, PQC is definitely not snakeoil, and it's actually seen uptake in a lot of things over recent years (just off the top of my head: openssh 9.0 in 2022, evolving work in implementations in TLS ciphers, etc (and as much as I fucking dislike cloudflare, they are actively funding a lot of forward-looking cryptographic work - thus being one to link to)). but as with all things cryptography, it's a moving and changing field
I suspect in this statement, "the industry" is load-bearing and inspecific, and resolves as "the industry of things that do what zoom do". it is a highly vague statement though, and I 🤨 at it being used as it was where it was
(e: I did look up their actual announcement about this; "UCaaS" kill me)
I'm reticent to make any further specific claims/statements re the rest of PQC, since while it is one of my areas of interest and in which I keep relatively informed, I'm also not a cryptographer by trade and consider my knowledge at best armchair-competent. pretty damn interesting field though, if you have any interest in math or cryptography it's well worth diving into it sometime :)