Home Resources Frequently asked questions Quantum Cryptanalysis faq: What cryptographic primitives can achieve 80-bit post quantum security?
faq: What cryptographic primitives can achieve 80-bit post quantum security?
Synaptic Facts and FAQs - Quantum Cryptanalysis


Today, 80-bit security ratings are considered the absolute minimum for marginally secure commercial systems. The US NIST has already proposed phasing out 80-bit secure systems with 96-bit secure systems.

The following table outlines what minimum configuration of US NIST, Lamport-Diffie-Merkleand Synaptic ciphers can achieve 80-bit security against Shor's and Grover's quantum algorithms:

Cryptographic
operation
Minimum parameters for
80-bit PQS rating
80-bit post quantum secure examples
Data privacy 160-bit symmetric key AES-1923DES-168, PQSAES-128, VEST-4
Message Authentication 160-bit MAC SHA-256,PQSDES-96PQSAES-128VEST-4
Collision resistant hash 240-bit message digest SHA-256PQSDES-96PQSAES-128VEST-4
Mainstream Public Key catastrophically fail RSA, D&H, DSA, ECDH
Lamport-Diffie-Merkle
digital signatures
160-bit for the tree,
240-bit for the message digest
Coronado Merkle Signature Scheme - 256,
Generalised Merkle Signature Scheme - 256
1-to-1 key exchange 160-bit symmetric key AES-192, 3DES-168PQSDES-96
PQSAES-128VEST-4
many-to-many
key exchange
160-bit symmetric key Synaptic Labs' family of key exchange technologies

 

Last Updated on Friday, 16 January 2009 13:23
 

Related Items