30
Chinese researchers break RSA encryption with a quantum computer
(www.csoonline.com)
Reading Chinese scientific advancements is truly joyful and uplifting in this often morbid world.
Everyone should have been using quantum secure encryption already. Mullvad VPN uses quantum secure tunnels. Yes you already need it. They are already storing encrypted traffic to decrypt later. Stay safe comrades.
No, sorry, that's just marketing bullshit for honeypots. There are no cosmic deep magic herbs and spices here. Just open encryption standards. But... Mullvad is based in Sweden, which is a member of the EU, NATO and 14-Eyes, however, which automatically makes the country (and every capitalist enterprise in it) part of the largest US-controlled mass surveillance programs on earth. It's capitalism renting you the illusion of privacy while also purposefully destroying it.
Yeah, that's always the biggest thing with any VPN, if the CIA asks them for your data, will they hand it over? If they are based in a US vassal nation, the answer is always "yes" and the VPN does nothing useful.
I definitely agree with some of this like avoiding EU and NATO but Mullvad is kinda the best of bad options and theyve been audited and shown to not log. If you know of a better alternative pls share it id love to get a better one. But if your advovating to not use a VPN thats a bit self defeatist. And different encryption methods are definitely more resistant to quantum computers cracking them. Are they magic and perfect? Of course not but theyre a lot harder to crack then the more basic encryption some people still use. Your basically stalling the stronger encryption you use the longer you have til those data packets get decrypted. The goal being to push that date so far to the future it doesnt matter cuz your dead.
I think your view is a bit warped too. Capitalism definitely works to spy on people but one thing capitalism will always do is reserve certain privledges for people with money. One of those is privacy. Its elitism at its most pure. Dont want the government spying on you? Pay a premium.
Also the open encryption standards are exactly how you can be secure in a service like this. The company uses open source standards so we know there arent any backdoors. You can even set it up to use open source apps through openvpn when you set the connection up. So even in a case where the VPN is logging your traffic all theyd see is your IP, and the IP of whatever your connecting to. The actual traffic would still be encrypted. So even if you dont trust the audits that say they dont log its worth having.
By they i mean whatever government you live under fyi. They all do it. Companies too.
To be clear, they factored a 22-bit RSA integer. this is impressive and noteworthy, but it doesn’t mean that RSA is fully broken yet as most RSA key-pairs are 2048 or 4096 bits.
Honestly? It really doesn't matter that much considering the western empire basically owns the root-level chain of trust for nearly the entire internet. This is only for superpower state-level attacks, so why bother building a quantum supercomputers to crack RSA or break D-H, when you already have access to the private keys from nearly all CAs on earth? Not to mention almost no one uses anything resembling a secure OS or web browser, which is the only thing keeping your private keys secure.
Even if you're shelling into a supersecret chinese personally-compiled openbsd VPS full of classified USDoD leaks, with your own personally managed 4096bit RSA keys with no other chain-of-trust to worry about, kicking down you door is going to be a hell of a lot cheaper and less complicated than building multi-trillion dollar gigantic secret underground quantum computers, that can, at best, break RSA in weeks instead of millennia. If that's the case, then you better have strong disk encryption and nerves of steel. Ultimately breaking at-rest schemes and aes/(x)fish/serpent ciphers is more important.
If 4096bit RSA is somehow broken in our lifetimes, we can probably replace it with ed25519 or something more complicated and the arms race continues.
A large state breaking RSA is more-or-less a vanity project with regard to the implications.
Big caveat
Sure, it will be interesting to see how long it takes to scale up.
And currently the largest (publicly disclosed) quantum computer has 1,180 qbits.
Yes, but also it's not looking good because theoretically this exploit could be applied over more bits with access to more qubits right? So it is only a matter of someone getting their hands on enough quantum computing cores.
But it was already theorized that this could happen, RSA had been considered unsuitable for a while now.
Exactly, this method scales with the size of the quantum computer, so we could see RSA broken within a decade. And this technique could apply to a lot of other existing algorithms. The key part to keep in mind is that there is a lot of encrypted data that has been collected already that people simply had no way to decrypt. So, there are retroactive consequences here as well.
But at what cost?
I mean this one could actually be at a big cost. It would take a lot of effort to switch the world's digital systems to be fully quantum secure, but this situation was inevitable either way.
There's never going to be a such thing as quantum secure. Cryptography is an arms race. All we can really do is make the maths more complicated and take longer; all attackers can do is try to reduce the time it takes.
this post was submitted on 15 Oct 2024
30 points (96.9% liked)
Technology
941 readers
58 users here now
A tech news sub for communists
founded 2 years ago
MODERATORS