[tor-dev] Shor's Algorithm meets Lattices

bancfc at openmailbox.org bancfc at openmailbox.org
Sat Nov 26 12:50:16 UTC 2016

In a new paper Peter Shor extends his quantum algorithm to solving a 
variant of the Closest Lattice-Vector Problem in polynomial time. With 
some future tweaking it can be used against the entire family of Lattice 
based crypto.

While an error in the calculations has been pointed out and the paper 
will be withdrawn, this isn't reassuring since a revised version where 
this still holds is probable.

Its available on arxiv until Monday so grab a copy before then:


Without Lattice crypto we're stuck with some very ugly choices as Isis 
pointed out. McEliece is huge. SIDH is slow and brittle. The PQ future 
looks grim fam :(

More information about the tor-dev mailing list