CECPQ1 results
imperialviolet.org
imperialviolet.org
> [W]e did not find any unexpected impediment to deploying something like NewHope. There were no reported problems caused by enabling it.
It's great to have this data.
Minor question: I assume CECPQ1 stands for something like Concatenated Elliptic Curve w/ Post-Quantum #1, right?
Bigger question: will there be a CECPQ2 experiment? I really hope so! Based on how CECPQ1 was constructed (X25519+Newhope), and how this experiment was executed, I'd love to see Google continue playing an active role in PQ experimentation.
I'm hoping that we'll have some consensus in a year or two on a good candidate PQ algorithm that we can get deployed across several implementations. It might be very similar to NewHope, or perhaps Shor et al will break lattices in general :)
(C in CECPQ1 was "combined".)
Any good "Cryptography Engineering"-style post on this NewHope algorithm explaining what it does and its limitations? Any reason not to get excited about this being done in a practical application?
I learned quite a lot. It's from one of NH's inventors (Peter Schwabe aka cryptojedi).
I think there are good arguments to deploy postquantum-ecc-hybrid schemes today. If quantum computers are only 10-15 years away, which some scientists think, then there is a legitimate interest to protect today's communication against future adversaries.
Therefore I would've liked to see something like CECPQ1 as a preliminary cipher suite that gets used for a couple of years until we have something better.