NIST’s pleasant post-quantum surprise
Jul 8, 2022Bas Westerbaan

Summary
This post details NIST's announcement of the first four post-quantum cryptographic algorithms to be standardized: Kyber for key agreement and three signature schemes. It explains the threat posed by quantum computers to current public-key cryptography (RSA, ECC) via Shor's algorithm, distinguishing between symmetric encryption, key agreement, and digital signatures. The post analyzes Kyber's performance characteristics compared to X25519 and RSA, noting its speed but larger key sizes. It also discusses the implications for TLS and the potential for hybrid deployments. The post also briefly mentions other KEM finalists and candidates proceeding to a fourth round.
More from the Random Number Generation for Security trail
- Support for modern cryptographic algorithms in Workers
- Using AI to chart a course for our post-quantum migration
- Post-quantum authentication to origins is now supported
- Why we cannot wait for better post-quantum signature algorithms
- The White House's post-quantum executive order is an important milestone. It’s time to get to work