Good morning, Madrid! (Yes, I'm late, I was walking the Retiro park.) Fourth day of #IETF123 https://datatracker.ietf.org/meeting/123/
Today, for me, post-quantum crypto talk, and formal methods
Discussion
Loading...
Reminder that CRQC (really useful quantum computers) are far away in the future (the speaker does not expect them before 15-30 years). But government regulations ask for a migration before, even if useless.
Reminder that QKD (Quantum Key DIstribution) is only good for making press releases (don't believe the marketing and the hype).
Quantum random number generation is not mature.
Quantum sensors are cool. (Very expensive so probably only for the military.)
The rest of the talk will focus on quantum-resistant crypto, not n quantum devices.
The focus of the talk is actual deployement of quantum-resistant crypto in actual mobile operators' networks. 5G depends a lot on IETF standards using crypto (such as TLS 1.3 but also lesser-known IETF standards). Lot of places to upgrade!
There are also non-standard but very important uses of cryptography such as securing firmware updates for 5G nodes.
6G will be (promise!) fully quantum-resistant from the start (2027? 2028?)
Saying "we must be quantum-resistant" is one thing, deciding what algorithms to use is something else. Specially in a highly regulated industry like the telecoms, and with the desire to be used world-wide with as few changes as possible.
An example: hybridization or not?
A bit of formality, now. "Usable Formal Methods Research Group" https://datatracker.ietf.org/meeting/123/materials/agenda-123-ufmrg-00
1+ more replies (not shown)
bonfire.cafe
A space for Bonfire maintainers and contributors to communicate
Automatic federation enabled