Hacker News new | ask | show | jobs
by throw0101a 474 days ago
> If quantum computing breaks Bitcoin hash then it also breaks any other encryption so I can ssh to your server, login to your bank account, change the code in your github repo.

OpenSSH >9.0 has algorithms in place for the post-quantum world:

     * ssh(1), sshd(8): use the hybrid Streamlined NTRU Prime + x25519 key
       exchange method by default ("sntrup761x25519-sha512@openssh.com").
       The NTRU algorithm is believed to resist attacks enabled by future
       quantum computers and is paired with the X25519 ECDH key exchange
       (the previous default) as a backstop against any weaknesses in
       NTRU Prime that may be discovered in the future. The combination
       ensures that the hybrid exchange offers at least as good security
       as the status quo.
* https://www.openssh.com/txt/release-9.0

RFC draft:

* https://datatracker.ietf.org/doc/draft-ietf-sshm-mlkem-hybri...

* https://datatracker.ietf.org/wg/sshm/documents/

See also TLS:

* https://datatracker.ietf.org/doc/draft-ietf-tls-hybrid-desig...