A nice and reasonable approach.
I just wonder why doubling up the cyphers is the way to go? Not confident in the post-quantum cipher yet?
this post was submitted on 20 Sep 2023
159 points (98.2% liked)
Privacy
31993 readers
386 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Yeah they explain it in the article.
There was a "quantum safe" encryption scheme proposed that had a non-quantum vulnerability found in it. Perhaps they are hedging against that occuring again? The scheme was rejected in the end so didnt matter to much.
Google is also going with a combined approach: https://security.googleblog.com/2023/08/toward-quantum-resilient-security-keys.html
New ones are too young and not battle tested with time. Hybrid PQ is the norm until more data is available.
I never predict Signal will implement this QuanResist really fast pace than other messenger apps. Applause to the dev team!
We believe that the key encapsulation mechanism we have selected, CRYSTALS-Kyber, is built on solid foundations, but to be safe we do not want to simply replace our existing elliptic curve cryptography foundations with a post-quantum public key cryptosystem.
Does this sound like VX Junkies to anybody else? I feel the need to check on my turbo encabulator 😅
The original machine had a base-plate of prefabulated aluminite, surmounted by a malleable logarithmic casing in such a way that the two main spurving bearings were in a direct line with the pentametric fan. The latter consisted simply of six hydrocoptic marzlevanes, so fitted to the ambifacient lunar waneshaft that side fumbling was effectively prevented. The main winding was of the normal lotus-o-delta type placed in panendermic semi-bovoid slots in the stator, every seventh conductor being connected by a non-reversible tremie pipe to the differential girdlespring on the "up" end of the grammeters.
Will signald be updated? Matrix wants to know.
For anyone curious, I've opened an issue to confirm: https://gitlab.com/signald/signald/-/issues/377
Do we still like signal? I remember reading something about why you should stop using signal but this seems contrary to that
For every thing on this world, there will be people disliking this thing and being very vocal about it.
EFF still recommend Signal (and others) for people fitting various risk profiles: https://ssd.eff.org/