Pages:
Author

Topic: In light of the NSA's disclosure about ECC, how is cryptocurrency affected? - page 2. (Read 2657 times)

hero member
Activity: 770
Merit: 504

So these guys are stupid you think - https://www.nsa.gov/ia/programs/suiteb_cryptography/ ?

The fact that I read through most of that link, and double checked it before realizing it was the exact same link I posted initially 6x proves I'm too drunk to be commenting on this thread until at least 24 hours from now.
legendary
Activity: 2142
Merit: 1010
Newbie
If should be noted that if a Quantum Computer exists, it is beyond classified.... I do a *lot* of digging on the internet and the dark web and have never heard of a verified one.  The closest we have is D-Wave system's Quantum Annealing computer which is not the same thing. 
 
I have read research of scientists entangling 3 particles, a precursor to the first 4-qubit true quantum computer, but I've never read anything about 4 particles being successfully entangled.  Anyone can feel free to correct me, but wouldn't we need to be able to entangle 128 or 256 particles in a small area to create a "true" quantum computer capable of doing damage to modern cryptography?

So these guys are stupid you think - https://www.nsa.gov/ia/programs/suiteb_cryptography/ ?
hero member
Activity: 770
Merit: 504
Frist cpu then gpu then asics next quantum computers?

A quantum computer would rape Bitcoin blockchain with 1000 blocks generated within a minute.
 
 
If should be noted that if a Quantum Computer exists, it is beyond classified.... I do a *lot* of digging on the internet and the dark web and have never heard of a verified one.  The closest we have is D-Wave system's Quantum Annealing computer which is not the same thing. 
 
I have read research of scientists entangling 3 particles, a precursor to the first 4-qubit true quantum computer, but I've never read anything about 4 particles being successfully entangled.  Anyone can feel free to correct me, but wouldn't we need to be able to entangle 128 or 256 particles in a small area to create a "true" quantum computer capable of doing damage to modern cryptography?
legendary
Activity: 2142
Merit: 1010
Newbie
Frist cpu then gpu then asics next quantum computers?

A quantum computer would rape Bitcoin blockchain with 1000 blocks generated within a minute.
sr. member
Activity: 574
Merit: 250
In XEM we trust
If I recall correctly, there are currently no quantum computers available. A lot of research and development is put in it though.

But does this mean that quantum computers can brute force any address? If so, is there any way we can move bitcoin protocol to quantum computing level?

Frist cpu then gpu then asics next quantum computers?
legendary
Activity: 2142
Merit: 1010
Newbie
Every single cryptocurrency would be affected.

Let's not put all cryptocurrencies into the same basket, at least one is made to be quantum-resistant.


However, if you use bitcoin as it should be without reusing addresses, then the argument that ECC is broken is not as valid. In order for ECC to be broken by quantum computers, the public key needs to be known. The public key is only known when a transaction sends Bitcoin out of an address. Thus, if each address is only used to send one transaction which spends everything to other newly generated addresses, then everything will be fine since even with the public key known, there is nothing to steal.

You forgot to add that depending on characteristics of the quantum computer it can find private key and issue another transaction with higher fee before legit transaction is included into the blockchain.
staff
Activity: 3458
Merit: 6793
Just writing some code
There are many possible interpretations of these statements, but it is clear that the world's leading expert on cryptography just put out a gentle (but very public) warning that ECC may not be as secure as we believe.  This being the case, which cryptocurrencies might be affected by this?  Bitcoin?  Cryptonotes like Monero?  Ethereum?  
Every single cryptocurrency would be affected. They are all based off of bitcoin which uses ECC. The obvious solution is to switch to a quantum resistant algorithm for generating private and public keys. I do not know if one exists yet.

However, if you use bitcoin as it should be without reusing addresses, then the argument that ECC is broken is not as valid. In order for ECC to be broken by quantum computers, the public key needs to be known. The public key is only known when a transaction sends Bitcoin out of an address. Thus, if each address is only used to send one transaction which spends everything to other newly generated addresses, then everything will be fine since even with the public key known, there is nothing to steal.
  
Will those blockchains eventually have to radically change their encryption algorithms?  Are there any steps that should be taken now to preserve privacy and legitimacy before this happens?  
Just to correct you, cryptocurrences DO NOT USE ENCRYPTION. The only crypto part are for key generation and signing, and the hashing of data for txids and blocks. Hashes are considered quantum secure. The security of hashes can be easily increased by doubling the bit length to have the same security we have now, e.g. SHA512 is as secure as SHA256 when quantum computers come around.
legendary
Activity: 3430
Merit: 3080
Old argument I believe. Quantum computers breaking the cryptography of binary computing only leads to the use of quantum cryptography. Cat and mouse.
hero member
Activity: 770
Merit: 504
Most of you are already aware of the NSA's recent post (https://www.nsa.gov/ia/programs/suiteb_cryptography/) containing such troubling phrases as-  
Quote
Unfortunately, the growth of elliptic curve use has bumped up against the fact of continued progress in the research on quantum computing, which has made it clear that elliptic curve cryptography is not the long term solution many once hoped it would be.
 
Quote
 
For those customers who are looking for mitigations to perform while the new algorithm suite is developed and implemented into products, there are several things they can do. First, it is prudent to use larger key sizes in algorithms (see the table below) in many systems (especially, smaller scale systems). Additionally, IAD customers using layered commercial solutions to protect classified national security information with a long intelligence life should begin implementing a layer of quantum resistant protection. Such protection may be implemented today through the use of large symmetric keys and specific secure protocol standards.
 (emphasis mine)  
  
There are many possible interpretations of these statements, but it is clear that the world's leading expert on cryptography just put out a gentle (but very public) warning that ECC may not be as secure as we believe.  This being the case, which cryptocurrencies might be affected by this?  Bitcoin?  Cryptonotes like Monero?  Ethereum?  
  
Will those blockchains eventually have to radically change their encryption algorithms?  Are there any steps that should be taken now to preserve privacy and legitimacy before this happens?  
  
Pages:
Jump to: