NeutrinosFTW t1_j23f66o wrote
Reply to comment by Ribak145 in An IBM Quantum Computer Will Soon Pass the 1,000-Qubit Mark | The Condor processor is just one quantum-computing advance slated for 2023 by nick7566
You're right that symmetric cryptography (like AES) is still safe against quantum attacks, but the Internet relies heavily on asymmetric cryptography protocols, as well. The latter are based almost exclusively on the (elliptic curve) discrete logarithm problem and the integer factorization problem, which are easily solvable on quantum computers, so they wouldn't be secure in a post-quantum world.
The problem is that symmetric protocols need encryption keys, which can't securely be exchanged over insecure channels (like the Internet), so you either need to exchange them out-of-band (infeasible in most cases) or in ways that rely on the difficulty of solving hard mathematical problems. Additionally, things like digital signatures (which are vital in systems like Bitcoin) always use asymmetric cryptography, so it being broken would make it impossible to check the identity of the author of a digital message.
Luckily we've been working on post-quantum asymmetric protocols that use new mathematical problems for which we don't yet have efficient quantum algorithms. The hope is that by the time large-scale quantum computers become widely available, we'll have minted new secure standards.
Viewing a single comment thread. View all comments