19 ms·
In general forward security involves generating a new key for each conversation with Diffie-Hellman or similar. According to https://crypto.stackexchange.com/q
by modalduality 9y ago
In general forward security involves generating a new key for each conversation with Diffie-Hellman or similar.
According to https://crypto.stackexchange.com/questions/5610/diffie-hellman-is-post-quantum-secured https://crypto.stackexchange.com/questions/5610/diffie-hellm..., Diffie-Hellman is not post-quantum secure, but https://en.wikipedia.org/wiki/Supersingular_isogeny_key_exchange https://en.wikipedia.org/wiki/Supersingular_isogeny_key_exch... is a DH alternative that is.
- jgrahamc 9y agoWhich is partly why we wrote and open sourced a SIDH implementation in TLS 1.3: https://blog.cloudflare.com/sidh-go/ https://blog.cloudflare.com/sidh-go/
- exabrial 9y agoI <3 cloudflare, you guys are awesome!
- newman314 9y agoDo you have any performance numbers for SIDH vs ECDHE?
- grittygrease 9y agoCloudflare has a Go implementation of SIDH with p751: https://blog.cloudflare.com/sidh-go/ https://blog.cloudflare.com/sidh-go/ Here’s an overview of the performance from a patch by Armando Faz Hernandez: https://github.com/cloudflare/p751sidh/pull/2 https://github.com/cloudflare/p751sidh/pull/2