Tag

Post Quantum Cryptography

All articles tagged with #post quantum cryptography

Google tests quantum-resistant TLS via Merkle Tree Certificates
technology8 hours ago

Google tests quantum-resistant TLS via Merkle Tree Certificates

Google outlined a plan to keep HTTPS secure in a post-quantum era by using Merkle Tree Certificates (MTCs) that compress quantum-resistant data into compact proofs. A certificate authority would sign a single Tree Head for potentially millions of certs, with browsers receiving a lightweight inclusion proof instead of bulky post-quantum material (roughly 2.5 KB today vs. 64 bytes). Public transparency logs help prevent rogue certs, and Chrome has already started implementing MTCs, with Cloudflare piloting about 1,000 TLS certs while CAs prepare to adopt the system. An IETF working group on PKI, Logs, and Tree Signatures is coordinating standards to standardize this long-term, aiming to accelerate post-quantum resilience without slowing handshake times.

Bitcoin Edges Toward Quantum-Resistant Upgrades as Experts Split on Urgency
technology11 days ago

Bitcoin Edges Toward Quantum-Resistant Upgrades as Experts Split on Urgency

Bitcoin developers merged BIP-360 into the GitHub repository to establish a post-quantum framework, introducing Pay-to-Merkle-Root to disable the quantum-exposed key-path spend and laying groundwork for future quantum-safe signatures; the change is not yet activated and would require broad consensus to deploy. Within the community, experts are divided on how soon a quantum threat could matter: some, like Caltech’s president, project fault-tolerant quantum systems in 5–7 years, while others including NIST guidance and researchers like CoinShares and Jameson Lopp say practical quantum risks are still years or even decades away, underscoring ongoing debates about timing and the challenges of upgrading a ossified decentralized network.

Google Urges Speedy Move to Quantum-Safe Internet Security
technology19 days ago

Google Urges Speedy Move to Quantum-Safe Internet Security

Google warns that quantum computers could soon break current public-key cryptography and urges governments and industry to accelerate adoption of post-quantum cryptography, aligned with NIST’s PQC standards finalized in 2024. The company says it has been preparing since 2016, implementing crypto agility across its infrastructure, and outlines five policy steps: drive society-wide momentum across critical infrastructure; ensure PQC is embedded in AI systems; avoid fragmentation of standards; promote cloud-first modernization to ease migrations; and maintain ongoing engagement with technical experts to prevent strategic surprises.

Preparing Finance for Quantum Computing and Its Cybersecurity Risks
finance7 months ago

Preparing Finance for Quantum Computing and Its Cybersecurity Risks

The BIS paper emphasizes the urgent need for the financial system to prepare for quantum computing's potential to break current encryption, advocating for early adoption of quantum-safe cryptographic measures, coordinated planning, and exploring long-term solutions like quantum key distribution to ensure security and resilience.

"Apple Enhances iMessage Security with Quantum-Secure Cryptography in iOS 17.4"
technology2 years ago

"Apple Enhances iMessage Security with Quantum-Secure Cryptography in iOS 17.4"

Apple's upcoming iOS 17.4 update will introduce a new state-of-the-art security upgrade for iMessage, featuring post-quantum cryptography Level 3 (PQ3) to enhance security properties. This protocol will safeguard against sophisticated attacks and protect against known and unknown future threats, including high-level zero-click government attacks. The new security system will be deployed with the public releases of iOS 17.4, iPadOS 17.4, macOS 14.4, and watchOS 10.4, and is already available in developer and public beta releases.

"Apple Introduces Quantum-Proof Encryption for iMessage in iOS 17.4"
technology2 years ago

"Apple Introduces Quantum-Proof Encryption for iMessage in iOS 17.4"

Apple has introduced a new post-quantum cryptographic protocol called PQ3 to enhance the security of iMessage against potential quantum computing threats, aiming to achieve Level 3 security. The protocol combines Kyber and ECC, and is designed to protect against highly sophisticated quantum attacks and mitigate the impact of key compromises. Support for PQ3 will roll out with the next iOS, iPadOS, macOS, and watchOS updates, while Apple also plans to bring Rich Communication Services (RCS) to its Messages app with improved security and encryption.

"Apple Introduces Quantum-Proof Encryption for iMessage in Latest Update"
technology2 years ago

"Apple Introduces Quantum-Proof Encryption for iMessage in Latest Update"

Apple has announced a new post-quantum cryptographic protocol for iMessage called PQ3, which provides extensive defenses against quantum attacks and surpasses the security of other widely deployed messaging apps. The PQ3 protocol will roll out for supported iMessage conversations starting with certain software updates in March and will fully replace iMessage's existing cryptography protocol later this year. The new protocol is designed to protect users against potential future quantum attacks and will require all devices in an iMessage conversation to be updated to specific software versions or later to be eligible.

Google's Quantum-Resistant FIDO Encryption Algorithm Unveiled
technology2 years ago

Google's Quantum-Resistant FIDO Encryption Algorithm Unveiled

Google has announced the release of the first implementation of quantum-resistant encryption for FIDO2 security keys, which provide secure logins to websites without passwords. The implementation combines the elliptic curve digital signature algorithm (ECDSA) with a post-quantum algorithm called Dilithium. This hybrid approach aims to protect against future quantum attacks while also relying on the battle-tested ECDSA algorithm. The implementation is small enough to run on security keys' constrained hardware and offers improved signature speed. Google hopes to see this implementation standardized and supported by major web browsers to protect users' credentials against quantum attacks.