[saag] Re: [SAAG] A New Theory on Post-quantum Migration
Wang Guilin <[email protected]> Mon, 3 Nov 2025 19:09:06 +0000
| Newsgroups | gmane.ietf.saag,gmane.ietf.pqc |
|---|---|
| Message-ID | <[email protected]> |
No solid source for this. This is also the reason why these assumptions are called arguable in my slides. My intuitive idea is: Given that SIKE is not secure later but it was one out of 15 PQ algorithms (Finalists+Alternate Candidates) in the 3rd round of NIST competition, we may assume that a PQ algorithm could be at risk of 1%. https://csrc.nist.gov/projects/post-quantum-cryptography/post-quantum-cryptography-standardization/round-3-submissions It will be great if anyone knows how to do such risk analysis much more rigorously, and what more reasonable numbers could be assigned for such initial assumptions. Guilin 发件人：Deirdre Connolly <[email protected]<mailto:[email protected]>> 收件人：Wang Guilin <[email protected]<mailto:[email protected]>> 抄 送：IETF SAAG <[email protected]<mailto:[email protected]>>;pqc <[email protected]<mailto:[email protected]>>;Wang Guilin <[email protected]<mailto:[email protected]>> 时 间：2025-11-03 12:26:07 主 题：Re: [saag] [SAAG] A New Theory on Post-quantum Migration > A PQ signature has risk of 1/100, not as mature as T… before 2035, against classic and CRQC attacks. Where is this number coming from? 3 noy 2025, B.e., 11:42 AM tarixində Wang Guilin <[email protected]<mailto:[email protected]>> yazdı: Dear all, Last night, I gave a talk with title of A New Theory on Post-quantum Migration at HotRFC lightning talk session. In case you are interested in it, welcome to discuss! (Personaly, I like it) The sildes availvale here: https://datatracker.ietf.org/meeting/124/materials/slides-124-hotrfc-sessa-11-pq-migration-00 This talk offers a new viewpoint for the value of hybrid post-quantum (PQ) migration. It is a quantitative analysis on different migration policies, with simple probability reasoning. Not complex, understandable to everyone. The context is based on recent discussions in Pquip, Jose/Cose, and Lamps WGs. The purpose is to invoke further thoughts on PQ migration policies. Under the assumptions given, hybrid signatures can reduce the migration risk 5 times lower than pure PQ migration. Cheers, Guilin _______________________________________________ saag mailing list -- [email protected]<mailto:[email protected]> To unsubscribe send an email to [email protected]<mailto:[email protected]> _______________________________________________ saag mailing list -- [email protected] To unsubscribe send an email to [email protected]