@paulmillr: Hybrid post-quantum cryptography seems like a proper choice for the following decade. Cost of ECC is tiny. It’s already…
Summary
Discussion on hybrid post-quantum cryptography as a practical choice for the next decade, citing low cost of ECC and referencing Daniel J. Bernstein's blog post comparing solo PQ to ECC+PQ approaches.
View Cached Full Text
Cached at: 07/05/26, 04:33 PM
Hybrid post-quantum cryptography seems like a proper choice for the following decade.
Cost of ECC is tiny. It’s already everywhere.
Daniel J. Bernstein (@hashbreaker): New blog post: “Bugs happen: The easy way to compare solo PQ to ECC+PQ.” https://t.co/Oa8qybuoPj #pqcrypto #bugs #vulnerabilities #hybrids
Similar Articles
A Post-Quantum Future for Let's Encrypt
Let's Encrypt announces plans to adopt Merkle Tree Certificates for post-quantum authentication, addressing the growing urgency to migrate to post-quantum signatures in the Web PKI.
Sooner than expected? Useful quantum error correction promised for 2028.
Amazon and QuEra promise useful error-corrected quantum computing by 2028 with their Libra hardware, aiming to achieve a million quantum operations over hundreds of logical qubits for scientific applications beyond classical and NISQ computers.
A Gentle Introduction to Lattice-Based Cryptography [pdf]
A gentle introduction to lattice-based cryptography, covering foundations and potential use in post-quantum cryptography.
White House drastically shortens deadline for dropping quantum-vulnerable crypto
The White House issued an executive order shortening the deadline for transitioning to quantum-resistant encryption to 2030/2031, citing reduced cost estimates for quantum computers and the threat of harvest-now-decrypt-later attacks.
Quantum computing startup says it will leapfrog everybody
QuEra announces a roadmap to build a quantum computer with over 10,000 qubits and 256 error-corrected logical qubits by 2028, aiming to leapfrog current systems, with a more powerful successor by 2029.