logoalt Hacker News

mperham12/09/20242 repliesview on HN

Right? Does TLS1.3 have the underpinnings to use quantum-proof encryption algos?

https://en.wikipedia.org/wiki/Post-quantum_cryptography

https://www.microsoft.com/en-us/research/project/post-quantu...

https://www.forbes.com/councils/forbestechcouncil/2024/10/09...


Replies

bangaladore12/09/2024

It seems you can get TLS 1.3 (or atlest slighty modified 1.3) to be quantum secure, but it increases the handshake size by roughly 9x. Cloudflare unfortunately didn't mention much about the other downsides though.

https://blog.cloudflare.com/kemtls-post-quantum-tls-without-...

show 1 reply
SAI_Peregrinus12/09/2024

Yes-ish. They're not enabled yet, but post-quantum signatures & KEMs are available in some experimental versions of TLS. None are yet standardized, but I'd expect a final version well before QCs can actually break practical signatures or key exchanges.

show 1 reply