Back in the late 90s, I literally had to explain why spam filters weren’t a violation of free speech. It seemed like a ridiculous thing to have to explain. I thought it would be obvious to everyone that their right to speak didn’t impose an obligation on others to listen.
Seeing that the same point still needs to be made today just makes me sad.
I fully advocate intensive research in PQC. And QC isn’t the only reason to want to ditch crypto now harder than discreet log and factoring problems. But I feel like we are still learning things “too fast” to actually standardize.
The best argument for standardizing I’ve heard is that we are learning things so fast because we are trying to adopt standards.
Mostly I feel that it is too early to be standardizing PQC. The process has helped discover problems, with SIKE for example, and so is good thing. But I don’t think we are ready to codify winners.
We really do have time. Work on PQC remains well ahead of any cryptographically relevant QC.
My colleagues at 1Password have just open sourced our typeshare crate. It makes it much easier for #rust devs to create and manage FFIs and producing data types for #GoLang, #Swift, #kotlin, and #TypeScript built from the structs we need those to know about.
Security geek. Dilettante academic. Political junky. Maker of bad math puns. He/they Opinions represent the voices in my head.For whatever it’s worth, my profile and toots are searchable with #tootfinder