Slashdot Mirror


Quantum Cryptography Systems Commercially Launched

prostoalex writes "NY-based MagiQ has now started commercial shipments of its quantum cryptography systems, which it claims is the first commercially available device of its type. Apparently, 'Quantum cryptography goes a step further than electronic cryptography through its employment of a stream of photons, the quantum properties of which determine the key. The fun part is that if an intruder observes or intercepts the transmission, those properties get changed'." We've previously run stories on advances in quantum cryptography.

181 comments

  1. Who uses this? by Dancin_Santa · · Score: 2, Insightful

    This is one of those really cool things that doesn't really have a market ready for it.

    1. Re:Who uses this? by Anonymous Coward · · Score: 0

      This is one of those really cool things that doesn't really have a market ready for it.

      On the other hand, I would like to have more companies selling cool things just because they are cool!

      But oh wait, I know, businees does not work like that!

    2. Re:Who uses this? by the_duke_of_hazzard · · Score: 1

      Well, it could if you wanted to pay for it...?

  2. Excellent!! by Anonymous Coward · · Score: 0

    Now the NSA has something new to play with, and they'll forget about trying to crack our measly PGP. Geeks rejoice!!

    1. Re:Excellent!! by Anonymous Coward · · Score: 0

      What do you mean "try"? We've been listening from the start.

    2. Re:Excellent!! by LittleDan · · Score: 1

      They don't need to mess around with quantum encryption for too long. It's easy to get around. Quantum encryption is completely susceptible to an MITM attack.

  3. Curses! Foiled again! by DKConstant · · Score: 5, Funny

    I tried to read the article, but I couldn't find the bloody thing! I'm used to that though, but the part that boggles me is, "Was this the standard Slashdot Effect or was it Heisenberg's Uncertainty Principle?"

    More worrying: Are they somehow related?

    I'll leave that one to deeper minds.

    --
    ----- "Oh, Stewardess! I speak l33t!"
  4. The cat by acehole · · Score: 3, Informative

    For those in the audience that dont get the 'I-lost-my-cat-dept' it's in reference to Schrodinger's cat, a quantum theory of superposition. You can find what it's about here.

    --
    Be you Admins? nay, we are but lusers!
    1. Re:The cat by wanion · · Score: 3, Informative

      Or perhaps try the wikipedia entry here.

    2. Re:The cat by be-fan · · Score: 2, Funny

      If you don't get a joke like that, you deserve to have your Slashdot account revoked. Let's not dilute the meritocracy, m'kay?

      --
      A deep unwavering belief is a sure sign you're missing something...
    3. Re:The cat by BOFHelsinki · · Score: 1

      Laymen (and moderators...), please note that the Wikipedia explanation is much more useful than the TechTarget version: the latter oversimplifies (the geiger trigger into just a poison vial), losing the essential microscopic-macroscopic connection.

    4. Re:The cat by Anonymous Coward · · Score: 0
      I thought it was in reference to Sean Hughes' scary short story "Sleep Tight".

      [spooky voice]I want my cat back[/spooky voice]

      ...wait, maybe you're right. ;-)

    5. Re:The cat by Anonymous Coward · · Score: 0

      "Slashdot" and "meritocracy" in the same sentence?

      Your post is why the "Funny" moderation should be worth karma.

    6. Re:The cat by thinkninja · · Score: 1

      Or maybe even this.

      Just kidding. However, Deutsch's Fabric of Reality is an accessible and engaging text for the layman like me.

      --
      "The number of Unix installations has grown to ten, with more expected." (Unix Programmer's Manual, 2nd ed.; june 1972)
    7. Re:The cat by RichardX · · Score: 1

      Hahahhaha!
      "Dilute the meritocracy"...
      On Slashdot!
      Ohhh gawd, stoppit, you're killing me!

      --
      Curiosity was framed. Ignorance killed the cat.
    8. Re:The cat by Dr.+Photo · · Score: 1

      Yeesh. Quit being such a Briggsing, Bryanting Rhenquist. ;-)

  5. How by mojowantshappy · · Score: 0
    Ok, I've read the article, but there is one thing I would like to know.

    How can you have quantam cryptography without a quantam processor... or... how does it work?

    --

    This page was generated by a Barrel of Circus Midgets, and that is the way I like it!!!

    1. Re:How by RogueProtoKol · · Score: 1

      Quantam cryptography is based on the transmission of the encrypted information, not on the actual encryption of it

    2. Re:How by OP_Boot · · Score: 2, Informative

      Nonsense. QC doesn't care in the least how the encrypted information is transmitted. Nor does it even care too much about how it is encrypted. If you look at the company's website it clearly shows diagrams with the data going along one path, and the (quantum) key going along a dedicated path. It's all about the transmission of the KEY. The key is transmitted in such a form (individual polarised photons) that it is impossible to intercept the key without changing it.

    3. Re:How by I8TheWorm · · Score: 1

      From Wikipedia.

      It is possible to send light that is in a superposition of states down a fiber optic cable. Placing a wiretap in the middle of the cable which intercepts and retransmits the transmission will collapse the wavefunction (in the Copenhagen interpretation, "perform an observation") and cause the light to fall into one state or another.

      --
      Saying Android is a family of phones is akin to saying Linux is a family of PCs.
  6. article text for /. effect by Anonymous Coward · · Score: 5, Informative

    Startup MagiQ Technologies Inc. yesterday announced it's shipping what appears to be the first security system based on quantum cryptography (see MagiQ Ships Quantum Crypto ).

    Quantum cryptography goes a step further than electronic cryptography through its employment of a stream of photons, the quantum properties of which determine the key. The fun part is that if an intruder observes or intercepts the transmission, those properties get changed -- an unavoidable principle of quantum mechanics -- meaning the sender and receiver can tell if anyone is eavesdropping. Perhaps more important, the key can't be copied or faked (see Optical Science Gets Spookier and Quantum Cipher Sent by Fiber ).

    It's a potential breaththrough, though working with photons has never been easy, and, as the optical networking bubble has shown, it can be an expensive way to build technology.

    MagiQ's Navajo system, a box made to fit in a standard telecom rack, was unveiled in February and began beta trials in March (see MagiQ Demos Quantum Cryptography ).

    MagiQ says Navajo performs the usual triple-DES and AES encryption standards. What's special is the transmission of the key, a string of random bits used to decipher messages. Computers normally use a random number for the key, producing encryption schemes that could be broken if enough computing power were made available.

    "There's a big vulnerability people see, because optical fiber is very easy to tap," says Bob Gelfond, MagiQ CEO, citing one carrier that was finding taps in its Manhattan office "several times a week."

    Using a quantum crypto scheme can defend against such taps. In addition to the obvious government and military customers, quantum cryptography is finding interest in the financial sector, for protecting backups or real-time traffic. Another target market would be any industry needing to protect intellectual property -- not just high-tech firms, but businesses such as automotive firms or tire manufacturers, Gelfond says.

    But the real market may be the carriers themselves, he notes, simply because they're looking for revenue sources. Quantum cryptography could become a premium service for them. With that in mind, MagiQ is aiming for a price -- around $50,000 to $100,000, depending on features -- that's comparable to other add-ons such as VPN boxes.

    Several other companies are working on quantum cryptography, but few appear to be interested in selling a complete system. Swiss firm ID Quantique is trying to commercialize quantum cryptography but so far offers only components such as a photon detector. ID Quantique recently partnered with other Swiss firms to expand its work into a quantum cryptography infrastructure (see Partners Promote Quantum Cryptography ).

    Elsewhere, large companies, including IBM Corp. (NYSE: IBM - message board), Mitsubishi Electric Corp., NEC Corp. (Nasdaq: NIPNY - message board; Tokyo: 6701), and Toshiba Corp. (Tokyo: 6502 - message board), are investigating the area more as a research project, with promising results but no products planned for the near future. "The big guys doing the research are not coming out with anything for a least a couple of years, as far as we know," Geldfond says. (See NEC Transmits Quanta , Japanese Claim Transmission Record , and Mitsubishi Creates Quantum Crypto .)

    So, while MagiQ isn't alone in pursuing quantum cryptography, the company's taken a different approach. "Where we started to break new ground was in putting the engineers into the mix, guys who had substantial experience -- Sycamore guys, Tektronix guys," Gelfond says.

    MagiQ employs 22, with offices based in New York. Founded in 1999, the company has been powered by roughly $6.9 million in angel funding (see Quantum Crypto Company Launches ).

    In addition to Navajo, MagiQ is offering a box that only generates the quantum keys, intended as a tool for research outfits and universities.

    -- Craig Matsumoto, Senior Editor, Light Reading

    1. Re:article text for /. effect by Anonymous Coward · · Score: 0
      "There's a big vulnerability people see, because optical fiber is very easy to tap," says Bob Gelfond, MagiQ CEO, citing one carrier that was finding taps in its Manhattan office "several times a week."

      Coincidentally, the very same week a certain Mike Bloggs, a repairman at a subcontractor of the carrier, was heard loudly complaining that he had to reinstall a switch over and over because someone kept stealing the equipment from a locked cabinet.

    2. Re:article text for /. effect by spong · · Score: 2, Funny

      -- Craig Matsumoto, Senior Editor, Light Reading

      Is this a joke?
  7. Ummm... by chill · · Score: 4, Insightful

    The setup consists of two rackmount units connected by both optical and Ethernet cables.

    So... do the boxes have to be close enough to run the optical cables directly? Can the signal be regenerated or amplified without disturbing the photons? (I doubt it.) How about sending the photon stream through a DWDM switch? (Again, I doubt it.)

    If the pair of boxes has to be in the same building, that isn't going to be a big seller. Bob would just walk down and HAND Alice the data.

    Nice PR stunt, though.

    Oh, I really want to know what telco is finding multiple taps a week to their optical fibers. I really smell bullshit here.

    --
    Learning HOW to think is more important than learning WHAT to think.
    1. Re:Ummm... by zeno_2 · · Score: 1

      It says here that the maximum 2 of these can span is 120km. They also say a bit farther down that if you wanted it to go farther, you could daisy chain them together.

    2. Re:Ummm... by Chilles · · Score: 1

      Yup, there would have to be a direct optical link. The ethernet could go through any ethernet though (internet for example).
      Of course you can get quite long optical cables without a repeater. So for example a few companies in a financial district could use this to safely link their systems. And linking two offices some 100 km apart isn't impossible either. Yes, it's ridiculously expensive, but the people that need this kind of security usually have money to burn anyway.

    3. Re:Ummm... by the+bluebrain · · Score: 1

      Not only a PR stunt. The basic idea is that it breaks the principle that any encryption system for transmitting data must be sufficiently powerful to ensure that the expected cost of breaking the encryption is greater than the value of the data being transmitted. Using quantum encryption for data transmission means that in principle, you can send data of an arbitrary value over the link, as there is no known theoretical way for any third party to listen in on the transmission - i.e., you don't have to worry about it.

      Of course, the devil is in the details, and I do wonder if the subject of the article is actually a foolproof implementation of the theory. Honsetly, I doubt that they can send a _single_ photon through 120 km of fibre and reliably measure it at the end. And as soon as you're sending redundant photons (i.e., regular short bursts of laser light that happen to be polarised) - bang goes your theory. That would make it far harder to tap, but there would be theoretical methods of doing so at a finite cost.

      --
      yes, we have no bananas
    4. Re:Ummm... by Realistic_Dragon · · Score: 1

      Possibly might be useful in foreign capitals, to run between the embassy and the comms shed or the embassy and employee houses in the nearby compound.

      Can't see many other uses for it at the moment, but it's early days.

      --
      Beep beep.
    5. Re:Ummm... by Big+Nothing · · Score: 1

      If i understand correctly (and im not certain that I do - im just reciting my memory/limited knowledge here), the basics if quantum cryptography is this:

      Using the quantum states of photons, you are able to encrypt information that cannot be intercepted; by observing the photons you are altering them, rendering the information useless.

      This is a very fragile process, since a lot of things can influence the photon stream. There's no guarantee that the information will make it to the receiver, but thats not the point - the point is that you are guaranteed that the information has not been read by anyone unauthorized.

      This technology was first thought of for use in military applications. The use of satellite transmission for sensitive information requires a secure encryption - one that ensures that the enemy doesnt get hold of the information. If the information falls into the wrong hands, the [insert your favourite enemy here] will win the war and take over the world!

      You might have to send the information 1000 times to/from the satellite for it to get though in one piece, but at least the commies/muslims/terrorists/etc. never found out what we are up to!

      To answer your question on whether a fibre cable link is the only media possible: no. The technology is supposed to give us open-air transmissions (using lasers) to and from satellites, between buildings, etc.

      Also: the signal can be amplified, rerouted, etc. but not while in a quantum (optical) state. You need a reciever that decodes the signal, amplifies it and resends it.

      --
      SIG: TAKE OFF EVERY 'CAPTAIN'!!
    6. Re:Ummm... by pdbaby · · Score: 1

      Quantum Crypto allows for the possibility of data bring lost in the transmission: just as it allows for selecting the wrong filter at the recieving end.

      Even if only a small amount of the photons sent are actually recieved, they can be used (although, obviously, the system wouldn't be as fast or efficient as if all photons had been recieved, since there's then the added problem of selecting the right filter!)).

      We can always wait for Bruce Schneier's opinion whether it's snake oil or not in his next cryptogram
      , due out in a week or so.

      --
      Global symbol "$deity" requires explicit package name at line 2. - If only $scripture started "use strict;"
    7. Re:Ummm... by the+bluebrain · · Score: 1

      Yes. My point was whether they actually are sending separate photons, or just faking it with bursts of polarised coherent light - although I guess that'd be kind of hard to justify even by the best PR spin doctor.

      Ya know - maybe I should just read the article and stuff.

      --
      yes, we have no bananas
    8. Re:Ummm... by God!+Awful+2 · · Score: 2, Insightful


      If the pair of boxes has to be in the same building, that isn't going to be a big seller. Bob would just walk down and HAND Alice the data.
      Nice PR stunt, though.

      It's worse than that... it's complete FUD even if the boxes are in different buildings.

      - This only works for individual point-to-point links, where the burden of managing pre-shared keys is not that high.
      - Quantum cryptography replaces Diffie-Hellman, but it doesn't replace authentication. So you still have to have a pre-shared key or else the attacker can just splice the fiber and do a man-in-the-middle attack.
      - They're using this ultra-secure technology for key exchange, but then they still send the rest of the data using AES or 3DES. If someone invents a quantum computer powerful enough to crack 2048 bit DH, they could use it to crack AES instead.

      -a

    9. Re:Ummm... by armb · · Score: 1

      > If the pair of boxes has to be in the same building, that isn't going to be a big seller. Bob would just walk down and HAND Alice the data.

      They claim 120km range.

      --
      rant
    10. Re:Ummm... by Beryllium+Sphere(tm) · · Score: 1

      >Can the signal be regenerated or amplified without disturbing the photons?

      Absolutely not.

      You can't copy a quantum state. If you could, then you could clone the state of a particle, make an exact measurement of the position of one copy and the momentum of another, and you'd have bypassed the uncertainty principle.

      Which is what makes this whole scheme theoretically possible. If you could amplify one photon to N photons without disturbing the first one, then you could tap the key exchange undetectably.

      It's all academic because Shamir has explained how to break quantum key exchange anyway. I've discussed the details in previous posts. It's a classic find-the-hidden-assumption attack.

    11. Re:Ummm... by Anonymous Coward · · Score: 0

      From what I remember (and I don't remember all the details), the man-in-the-middle attack can be ruled out, because Bob and Alice can compare polarization patterns over an independent channel without actually sending the data. If Bob's received polarization doesn't match what Alice sent, then the stream isn't authentic.

    12. Re:Ummm... by NuShrike · · Score: 1

      Can't you clone with entangled photons? Or the process of entangling the photon changes it too?

    13. Re:Ummm... by God!+Awful+2 · · Score: 1


      From what I remember (and I don't remember all the details), the man-in-the-middle attack can be ruled out, because Bob and Alice can compare polarization patterns over an independent channel without actually sending the data. If Bob's received polarization doesn't match what Alice sent, then the stream isn't authentic.

      Sure they can, but doesn't that defeat the whole point? "We're going to sell you this ultra-high-tech device that gives you a 'quantumly secure' channel and all you have do is maintain a different secure channel to verify that this one hasn't been tampered with!"

      -a

  8. Cool. by eurleif · · Score: 1

    Sounds cool, but probably ahead of its time. Who really needs that kind of security?

  9. MOD PARENT DOWN by Anonymous Coward · · Score: 0

    It's a rip off from a previous quantum encryption article!!!

  10. Direct Fiber Connection? by cravey · · Score: 3, Interesting

    Yeah, but due to the nature of the the quantum portion, don't you have to have an unbroken end to end fiber connection with optical breaks for things like switching equipment? It seems that a repeater would change the polarization of the signal and kill the protocol.

    1. Re:Direct Fiber Connection? by ajs318 · · Score: 4, Informative

      Yup, that's the dirty little secret of quantum crypto. You need a direct, end-to-end fibre connection for it to work. You also need an alternative, non-quantum, secure communication channel to verify the integrity of the quantum data. If the secondary channel isn't secure, an eavesdropper who listened both to the quantum-encrypted data and the integrity check would be able to reconstruct the data.

      It's a bit like having a faster-than-light communicator where you get the message faster than light, but you can only find out what the message meant by calling up the sender on a slower-than-light link.

      Quantum Cryptography is a bit like one of the things you see advertised on satellite TV "info-mercials", or in those irritating promotional catalogues that get tucked into magazines. You know the sort of thing I'm talking about: you start out amazed, barely able to believe anyone could invent something as wonderful as that; but if you order one, you'll end up wondering why they even bothered inventing it.

      --
      Je fume. Tu fumes. Nous fûmes!
    2. Re:Direct Fiber Connection? by the+bluebrain · · Score: 2, Informative
      • If the secondary channel isn't secure, an eavesdropper who listened both to the quantum-encrypted data and the integrity check would be able to reconstruct the data.
      Yeah, but the point is that in a good implementation of such a system, no third party would be able to listen to the quantum-encrypted data without changing it - at which point Bob and Alice would know that the there was an eavesdropper (or that the system had gone bellyup).
      --
      yes, we have no bananas
    3. Re:Direct Fiber Connection? by dido · · Score: 1

      AFAIK, the classical channel can be eavesdropped upon, and the eavesdropper will gain no information about the key being exchanged, so it doesn't need to be absolutely secure. It just needs to be safe from jamming, because if you jam the classical channel the two parties have no way of discussing the level of interference on the quantum channel, and the protocol breaks down. As has been mentioned repeatedly, it is impossible to passively eavesdrop on the quantum channel and gain useful information without being detected by the two communicants.

      To be more exact, I think a more valid description of what's up with this device is that it's too far ahead of its time and is unripe. The ideas have been proved in the lab, but to make one for consumption by the general public is premature.

      --
      Qu'on me donne six lignes écrites de la main du plus honnête homme, j'y trouverai de quoi le faire pendre.
    4. Re:Direct Fiber Connection? by ajs318 · · Score: 1

      All the discussion I have seen so far assumes that Eve has some way of just passively "listening in" on what Alice is sending Bob. I think one of the replies to my original post made the point that the bits Eve can determine correctly are the ones Alice and Bob will reject, and the ones they use are the ones Eve doesn't know, so while Eve has a key, it's not the same one as Alice and Bob are using. Well, that much makes sense.

      But what if Eve, taking it up a gear, completely severs the link and inserts her own receiver and transmitter? Now, Alice sends quantum data to Eve {thinking she is sending it to Bob}. Eve sends on quantum data to Bob {who thinks it has come from Alice}. Neither party can know about Eve's presence, since the link is one-way and naturally unreliable {in the sense that what Bob receives ain't necessarily the same as what Alice sent; only a bit more so ever since Eve stuck her device in place}.

      Alice knows what she sent, but not what "Bob" received. Eve knows what she received from Alice, but not what Alice sent; and she knows what she sent to Bob, but not what Bob received. Bob knows what he received but not what "Alice" sent.

      So later, Eve listens in passively when Bob calls Alice {via the non-quantum channel} to compare what he received {from Eve} against what Alice sent {to Eve}. There will obviously be errors from where Eve did not send the same thing Alice sent. However, these errors will be indistinguible from any other error source; they may cancel out anyway if Bob was already expecting the opposite of what Alice sent; and if Eve sees any kind of pattern to the data, she can use this to her advantage as now the probability of her retransmitting correctly is >50%. Assuming Alice and Bob decide that the transmission worked, Eve should have enough information to reconstruct the key for herself.

      If you are the sort of player who would need access to this sort of stuff, you have to assume that your adversary is determined enough to do anything.

      --
      Je fume. Tu fumes. Nous fûmes!
  11. The end of RIAAA by CreatorOfSmallTruths · · Score: 2, Insightful

    I'll go out on a lim here and say that if all of the internet will slowly become quantom-secure and ip addresses will stop being centrally provided (think about it... a blob of addresses no one central organization provides.. everybody have a dynamic IP and DNSs publicize only those who wants to be publicized...) P2P sharing will stop being a risk to the sharer/sharee.
    Goodbye all copyright.

    1. Re:The end of RIAAA by RMH101 · · Score: 2, Insightful

      and i'll go out on a limb and say "bullshit". decentralised, totally secure and anonymous connections worldwide? like that's going to be allowed to happen.

    2. Re:The end of RIAAA by HeghmoH · · Score: 1

      This should be marked 'funny', not 'insightful'.

      Decentralized, totally secure and anonymous connections *are* available worldwide, or as close to worldwide as 'any place with a cybercafe' is. Anonymous, yup, decentralized, yup, secure, grab PuTTY and go, yup.

      Of course maybe you know this and were being ironic, in which case it's just the mods who are being silly.

      --
      Mod down posts with a "Free Mac Mini/iPod" sig, they're spam!
    3. Re:The end of RIAAA by ahto · · Score: 1

      In many places, they may be available, but not necessarily allowed. Especially the PuTTY part. And they are not necessarily very anonymous either.

  12. Well after watching the flash... by Matrix2110 · · Score: 2, Interesting

    I have to say this technology is really subject to Dos style attacks. Simply overwhelm the server with false keys very much like an alphabet attack, and for those of you that scoff because of the huge numbers involved, realize the computer power of a large zombie army with todays excessive computer power.

    I don't want to say anymore because I am freaking myself out just thinking about it.

    1. Re:Well after watching the flash... by CreatorOfSmallTruths · · Score: 2, Funny

      Simply overwhelm the server with false keys very much like an alphabet attack ... No need, simply turn on a flash light ...

    2. Re:Well after watching the flash... by Matrix2110 · · Score: 1

      Well since you brought it up that is exactly what I was going to say next, Simply dig up the fiber optic cable nearest to you, shine a halogen flashlight on it and run. Instant Dos.

      I guess the cat is out of the bag, lets see what /. comes up with.

    3. Re:Well after watching the flash... by Barbarian · · Score: 1

      Or, you could cut the cable...

    4. Re:Well after watching the flash... by Matrix2110 · · Score: 1

      No, No, No. You never cut the cable, as the book "Blind mans Bluff" points out: You attempt to tap it at first, sabatoge it at second, cut it only as a last desperate resort.

      For God's Sake Man! Read some spy novels!

    5. Re:Well after watching the flash... by BOFHelsinki · · Score: 1

      I guess the cat is out of the bag,

      No, not bag. Box.

      Hrmmpf. Nobody seems to read the articles any more...

    6. Re:Well after watching the flash... by Matrix2110 · · Score: 1

      Bags are much superior in translocating cats. Boxes are not a good idea when open them the feral cat tends to jump out at your face and sink the claws in. At least with a burlap bag you have a fifty/fifty chance of the cat going for the balls.

  13. Not really the first by EggSausageBaconAndSp · · Score: 1

    A Business Week article dating from this year's July says: "A Swiss firm, ID Quantique, introduced the first commercial quantum cryptography products last summer" So that would be mid-2002.

    1. Re:Not really the first by Anonymous Coward · · Score: 0

      Yes, you are perfectly right. These guys (see http://www.idquantique.com/ have been seeling QC hardware for a while now (since 2002, at least), and other cool stuff as well (like true random generators based on QM).

      I think slashdot had even news about this, but it's no surprise they forget.

  14. Triple-DES and AES? Why not a one-time pad? by dido · · Score: 1

    If you can already transmit random bits by means of quantum cryptography, why not go the whole nine yards and exchange random keys that are as long as your entire message? The papers I've read on quantum cryptography all employ it as a method for the secure exchange of one-time pads. The only reasons I can think of are that 1. the effective bandwidth of the quantum channel is too low and/or 2. they're having problems setting up a reliable and fast source of real random numbers on their device (this is actually a lot harder to do than most people think).

    --
    Qu'on me donne six lignes écrites de la main du plus honnête homme, j'y trouverai de quoi le faire pendre.
    1. Re:Triple-DES and AES? Why not a one-time pad? by ajs318 · · Score: 1

      You don't ever need to exchange your one time pads. All you need is for your two functions to have the property that A'(B(A(x))) == B(x) and B'(A(B(x))) == A(x).

      Alice sends Bob A(x). Bob sends Alice B(A(x)). Alice sends Bob A'(B(A(x))) [== B(x)]. Bob evaluates B'(A'(B(A(x))) and gets x. {I think this method is known as Diffie-Hellman key exchange.}

      It needs three passes, but an eavesdropper would have to successfully intercept all three transmissions before they could recreate the message. And the use of three passes allows for embedding a seconary challenge-response mechanism.

      --
      Je fume. Tu fumes. Nous fûmes!
    2. Re:Triple-DES and AES? Why not a one-time pad? by ponxx · · Score: 1

      If you had a secure channel to transmit a one-time pad you might as well just transmit the message through this channel. The only reason to use a one-time pad is that you have the opportunity to securely exchange a message at an earlier time (e.g. by handing over a CD) and can use this message to send a secret message later.

      And yes, I suspect bandwidth is the reason they transmit a secret key, rather than the secret message itself over this channel.

      Ponxx

      PS ok, there are some justification for transmitting a one-time pad through the secure channel. If you could detect an attack you can refrain from sending the actual message. Also you could leave it "on" the whole time to build up a large one-time pad and then quickly send the actual messages through conventional channels. Still, if they want to server financial peopel they probably have stupid ideas about sending power point presentations or Excel Sheets, I don't think they'll ever build a secure channel that catches up with the size of MS files.. :)

    3. Re:Triple-DES and AES? Why not a one-time pad? by dido · · Score: 1

      I imagine they're using the protocol, or a close variation thereof, of the one described by Charles H. Bennett, Gilles Brassard, Louis Salvail, and John Smolin in their paper "Experimental Quantum Cryptography" (Citeseer link). They use the quantum channel to allow Alice and Bob to negotiate a random key known only to them, which cannot be eavesdropped upon, and also allows them to discover any eavesdropper attempting to obtain their key. You can't use a quantum channel to transmit real information, but you can use it to negotiate a perfectly random key between two communicants without anyone but the two parties knowing it. In other words, the quantum cryptographic protocols are just like Diffie-Hellman and other key exchange protocols we all know well, only they provide a physical proof that according to the laws of physics as we understand it today, eavesdropping is impossible.

      --
      Qu'on me donne six lignes écrites de la main du plus honnête homme, j'y trouverai de quoi le faire pendre.
    4. Re:Triple-DES and AES? Why not a one-time pad? by Anonymous Coward · · Score: 0

      The way it works, bob will only get half of the bits alice sends...and there's no way to know which half until after they've been sent. So it effectively only exchanges random data. But you can use that random data as a key.

  15. Snake Oil, Inc. by velco · · Score: 0

    "The fun part is that if an intruder observes or intercepts the transmission, those properties get
    changed -- an unavoidable principle of quantum mechanics -- meaning the sender and receiver can
    tell if anyone is eavesdropping. "

    Of course, in order to encrypt/decrypt something you have to access ("observe") the key, thus changing
    its "properties".

    ~velco

    PS. Can't wait for the next Crypto-Gram (http://www.counterpane.com/crypto-gram.html)

    1. Re:Snake Oil, Inc. by OP_Boot · · Score: 1

      Doh! Well why didn't they think of that before! If you eavesdrop on the QC exchange, the photons still have to make there way to the receiver. So the change you caused will be noticed. If you measure the photons at the receiver, you're not going to re-transmit them. It works because of the way of measuring the polarisation of the photons. Put simply, the receiver has two filters, a verical one and a horizontal one. The transmitter also has two filters, but these are at 45 degrees to the receiver filters (i.e. on the diagonals) A photon is polarised at the transmitter by sending it through a specific one of the two filters. At the receiver, a filter is chosen at random. There is a 50% chance that the the correct filter will be used to correctly 'read' the information carried by the photon. Using enough photons builds up enough results at the receiver that the transmitter can ask: "What filter did you use for photons 2, 3, 4, 6, 8, 9, 12" The receiver then replies (in clear text), and the transmitter can then say, ok, you used the correct filter for photons 3, 9 and 12, so we'll use the answers you got from those photons as the basis for our key." As an eavesdropper on the clear-text line cannot know what answers the recevier received for those photons, the key is secure.

    2. Re:Snake Oil, Inc. by velco · · Score: 1

      What you describe is trivially attacked with a man-in-the-middle.

    3. Re:Snake Oil, Inc. by OP_Boot · · Score: 1
      No.

      Well, maybe my explanation can be... but then maybe I didn't explain it very well.

      I suggest you read this: http://www.qubit.org/library/intros/crypt.html

    4. Re:Snake Oil, Inc. by adam+arndt · · Score: 1

      I can't resist this redundant comment:

      1. send photon
      2. ????
      3. receive photon, $$$$$ !

      -adam

  16. They can't produce single photons by iceco2 · · Score: 1

    SO I figure they must be doing something
    funny on the way. I would not recommend using
    such a system, I will stick to 2Kbit RSA thank you.

    Me

    1. Re:They can't produce single photons by Anonymous Coward · · Score: 0

      As usual they are attenuating the source emitting power down, so that they can obtain a good approximation of a single photon source.

      This of course does make the system in fact insecure against some classes of attacks, like photon number splitting attacks (PNS). They are not realistic with present day technology, but make the protocol completely insecure under a theoretical point of view. And maybe they will be practical someday.

  17. Re:The truth about quantum computers by Anonymous Coward · · Score: 2, Informative

    Shamelessly plagiarized from this comment:

    http://slashdot.org/comments.pl?sid=2382&cid=15105 44

  18. Re:The truth about quantum computers by popeyethesailor · · Score: 1

    You know, this must be like shooting fish in a barrel for you now ;) Move over Klerck. It's not worth it anymore..

  19. I wonder... by Anonymous Coward · · Score: 1, Insightful

    Couldn't the quantum twin effect be used to transmit information without anybody else even seeing that a communication takes place?

    1. Re:I wonder... by Anonymous Coward · · Score: 0

      Wouldn't observing the twin have the same effect?

  20. Re:The truth about quantum computers by Anonymous Coward · · Score: 1, Informative

    The most realistic initial use of quantum computers will be as add-ons to existing super-computers to resolve certain types of NP-Complete headaches that regular math can't simplify yet.

    Well, they cannot speed up NP-Complete problem in general, you can just quadratically speed up bruteforce enumeration of solutions, which is already achieved by most intelligent algorithms (which are still exponential).

    They can solve factoring and discrete logarithm (and some other things), which are not even known to be np-complete (or np-hard)

  21. hopefully... by jlemmerer · · Score: 2, Insightful

    ...this cool invention does survive the time until it can become widespread. At the moment I cannot really see a market for this system other than at the NSA and similar organisations (anybody got a quantum computer out there at the ready?). But as technology rapidly advances it this crypto mehthod could prove quite useful for enterpises and in the long term to all end unsers. We just have to look out that this technology doesn't disappear too soon (maybe a little bit accelerated by the above named organisations who don't like crypo they can quite easily brak or trapdoor)

    --
    ".Sig Stealer" was here
    1. Re:hopefully... by ph43thon · · Score: 1

      you gotta get clear on what Quantum Crypto is.. Though, it's the fault of whoever named it.. An appropriate name would be Quantum Key Exchange. There is no Quantum Computer. A normal computer (theoretically) sends photons of light, polarized in a certain way, to another computer. The main difficulty is transmitting photons over long distances without there being some sort of interference with the light. The key is exchanged in this way (hence the QKE name).

      Anyhow, so this is great stuff for banks and any institution that needs secure communication.

      p

  22. nothing impossible (except uncrackable encryption) by Anonymous Coward · · Score: 0

    but is it safe from man in the middle attacks?

    first: if legal party A sends data thru to party B, and party B can relais this to part C and so on ...
    ^ if this is possible it's just expensive equipment.
    two: ...

  23. Re:The truth about quantum computers by Anonymous Coward · · Score: 0

    Mod parent down. It is:
    -plagiarized
    -wrong
    -incomplete
    -shameless karma whoring

    The only good and correct thing about the post is the link about quantum computing, which adds to the vices of this post the most damned vice of all:

    -off topic
    (what he essentially writes is: Hey, you know the funny thing about quantum encryption? Well, it is not at all like fluffy bunny rabbits! Now, about fluffy bunny rabbits...)

  24. This is a quite interesting subject... by IversenX · · Score: 4, Informative

    But it is not likely to become widely available any time soon. The problem with quantum encryption, is that it is based on quantum states. These states are destroyed when observer (literally, you just have to look at them!), so it's not possible to read the data out and perform a "quantum dictionary attack", because how you read the data is part of the encryption

    This is what makes quantum encryption perfect. If somebody has even read the signal, you will know it. If they haven't, the problem is solved.

    However, in order to make use of this perfect encryption, the quantum state must not change. Therefore, any obstacle along the way (imperfections in the fiber optic cable, or any attempts to read the signal) will destroy the signal. This means that a quantum encrypted message cannot be transmitted through a switched network. Every switch (as we know them) would have to read the data, and pass them along. That is not possible.

    Instead, a technique known as Quantum Teleportation could be used. It's developed mainly in Denmark, and uses something called Einstein-Podolsky-Rosen-beams to transport the quantum state. The catch is that they never read the state, because that would crush it. They simply transport it on a carrier wave, much like in Star Trek :)

    --
    With great numbers come great responsibility!
    1. Re:This is a quite interesting subject... by Anonymous Coward · · Score: 0

      Uhhh...Not to sure of this but

      To put it simply, Quantum Teleportation is where two particles are entangled, and any changes applied to one of the particles is mirrored in the other, regardless of their physical position.

      So tell me, how will Quantum Encryption even be needed on this system? There is no way known to physical science to intercept the "message" as it moves its mysterious way from particle to particle, is there? What is the point in encrypting a completely secure communication method? It is unsecure transit of data that requires some form of encryption.

    2. Re:This is a quite interesting subject... by QEDog · · Score: 1
      However, in order to make use of this perfect encryption, the quantum state must not change. Therefore, any obstacle along the way (imperfections in the fiber optic cable, or any attempts to read the signal) will destroy the signal. [...] Instead, a technique known as Quantum Teleportation could be used.

      Quantum Teleportation has the same limitations. The way it works is Alice entangles 2 particles, transmit one to Bob. Then, Alice measures one, and Bob gets checks his particle to see what it was. But, transmiting the particle has the same problems you discussed. This is not an alternative.

      Also, and here is the difficult concept, many paper were written on the early days of QM to explain this, you cannot transmit information this way (it would violate causality). Alice measures something, but she cannot control it. She can't make it a 1 or a 0, she just reads if it is a 1 or a 0. And, Bob checks his particle, and reads it. So, they share a number, but they can't use it to send info to the other.

      --
      "There is no teacher but the enemy."-Mazer Rackham
    3. Re:This is a quite interesting subject... by owlstead · · Score: 1

      However, in order to make use of this perfect encryption, the quantum state must not change. Therefore, any obstacle along the way (imperfections in the fiber optic cable, or any attempts to read the signal) will destroy the signal. This means that a quantum encrypted message cannot be transmitted through a switched network. Every switch (as we know them) would have to read the data, and pass them along. That is not possible.

      That's true if you are using a point to point connection yes, if you trust party B (somewhere in a secure building) you could make a point to point connection from A to B to exchange the keys. B could do the same with end point C.

      What it comes down to: switch, no, router, yes. Creating a network would be no problem as long as you don't want to put switches in between two points. And as long as a digger does not seperate the cable, always a problem.

      Note that I am just using practical cryptography, not theoretical, so if you can shoot holes in my little theory, you're most welcome.

  25. Purely optical amplifiers might work by poszi · · Score: 1
    Can the signal be regenerated or amplified without disturbing the photons? (I doubt it.)

    From the description of the system it seems that they use superposition of polarization of photons. Any measurements across the path of the photons would destroy the superposition. Therefore, any amplifier that transforms optic data into electric data and back into optical would destroy the quantum state. However, purely optical polarization maintaining amplifiers exist and they might preserve the superposition.

    Quantum state can also be transmitted via Quantum Teleportation but this is much more sophisticated.

    --

    Save the bandwidth. Don't use sigs!

  26. Re:Curses! Foiled again! by KDan · · Score: 4, Funny

    And the unbelievably fuzzy sense of humour of slashdot moderators strikes again. It's weird how all you need to post to get modded +5 funny is something that *looks* like a joke. It doesn't actually have to be a joke or be funny in any way, so long as it has the right general shape or form and the appropriate keywords, it will be modded +5 funny.

    I actually tested this at one point. Here's the post I made. Thoroughly unfunny, no matter how twisted your sense of humour, but kind of looks like a joke. And of course it got modded +5 funny. Do slashdot mods mod it up out of fear for their own intelligence? Thinking maybe they're just not getting the joke but it's actually really funny because it looks like a joke?

    Who knows. I'd be interested in finding out. Any thoughts anyone?

    Daniel

    --
    Carpe Diem
  27. The properties get changed? by Anonymous Coward · · Score: 2, Insightful

    So what does this mean then? I'm assuming it means that as soon as someone looks at something, it changes so the original information is lost.

    In that case, could you launch a DoS attack on quantum crypto systems just by looking at all the data from a specific source? That way, none gets through.

    1. Re:The properties get changed? by sebster · · Score: 1
      In that case, could you launch a DoS attack on quantum crypto systems just by looking at all the data from a specific source? That way, none gets through.

      Uhm, if you have access to the cable, then why not just cut it if you want to do a DoS attack? Much easier, if you ask me...

    2. Re:The properties get changed? by whereiswaldo · · Score: 1

      The fun part is that if an intruder observes or intercepts the transmission, those properties get changed.

      My initial reaction was: if they can read the transmission, can they not predict exactly how their interference will alter the stream? In which case, does it matter that it has been altered?

  28. Easy to produce single photons by Anonymous Coward · · Score: 0

    Not really sure what you're getting at there.

    Anyone can produce single photons. All you have to do is to reduce the intensity of a beam to the point where the photons no longer overlap in space nor in time. That's not hard.

    And the above applies to the photon pair generators used in quantum cryptography just as much as to any other source. These have existed for many years now, although mainly in the lab.

    Perhaps I misunderstood your point?

    1. Re:Easy to produce single photons by Anonymous Coward · · Score: 0

      You are thinking deterministically. You actually make the probability of producing one single photon as big as possible. This does not mean, you cannot get more photons. Actually these (few) more photons which are produced are enough to perform (theoretical) attacks (assuming you have losses between Alice and Bob, which is the case).

      If you want to have more information look for "photon number splitting" in quant-ph/. There are some nice papers. There aren't many people caring about this, as usual, in quantum cryptography. This is the usual problem of quantum physicists not understanding information theory and information theoreticians not understanding quantum mechanics ;-)

  29. Won't work... by dido · · Score: 5, Informative

    I don't think amplification is going to do you good. If this implements the first quantum key exchange protocol, designed by Gilles Brassard and others (notably this is the easiest one to implement using present-day technology so far), they actually work by transmitting single photons one at a time, with the transmitter whom we shall call Alice (the one generating the key to be used for your subsequent symmetric cryptography) controlling the polarization. The recipient of the photons (Bob) then measures the polarization, then depending on whether the answer was correct or not decide what the value of the key bits should be. Doesn't matter if Eve is able to eavesdrop on the classical channel where they're communicating about polarization methods, Brassard and his colleagues showed that she will not be able to gain any information about the key Bob is receiving from there. If Eve tries to tap into the photon stream she'll be noticed by Alice and Bob because of the way her measurements are affecting Bob's measurements... Anyone feel free to correct me on this, I don't have Brassard's paper with me on hand at the moment and can't find it on the web, so I've been just going by it from memory.

    (in case you haven't yet noticed, this quantum cryptographic protocol, like most the others I've come across, is a key exchange protocol that works as a replacement for Diffie-Hellman or something similar).

    The upshot is that the fiber cable here will be from the point of view of conventional fiber optic equipment a dark fiber. Light intensity is so low that only specialized equipment can detect it. Anything else inside the fiber, be it an amplifier or a DWDM switch, or whatever else, won't recognize the transmission and may do something totally unexpected that breaks the protocol. Bob could always be reading the wrong polarization, and hence Alice would have to keep discarding key bits. However, apparently there are excellent fiber cables that can go for several kilometers and still maintain the kind of integrity required for the protocol (IIRC, Brassard mentions somewhere that as early as 1996 someone actually built a real setup employing his protocol, over a 15km fiber optic cable).

    Other quantum key exchange protocols I've come across are noticeably similar, and suffer from the many of the same limitations.

    The only use that I can see for this is if you're someone with the resources to lay your own fiber around, say if you have a large complex covering several acres, and are more paranoid than the NSA. There is a market, I think, but that market looks more like the military and intelligence agencies of large industrialized nations. Building such an infrastructure could cost billions, even if you all you wanted to do was securely interconnect several dispersed branch offices in one large city...

    --
    Qu'on me donne six lignes écrites de la main du plus honnête homme, j'y trouverai de quoi le faire pendre.
    1. Re:Won't work... by pluckyduck · · Score: 1

      A few kilometers of dark fiber would be enough for some clients. There are pockets of industry in many cities: Financial districts, banking districts, etc. So this would be good for big brokerage houses transferring funds in downtown Manhattan.

    2. Re:Won't work... by ysachlandil · · Score: 1

      Eve can only be detected if she tries to eavesdrop on the line, not if she sits in the middle doing her own quantum key exchange protocol. The only way around this is to have Alice and Bob authenticate themselves against each other. Which is not possible with quantum crypto yet, so you have to use public/private key crypto.

      When you have to use public/private key crypto, there is no reason to use quantum anymore, since a chain is as strong as it's weakest link so quantum crypto is worthless - QED

      --Blerik

    3. Re:Won't work... by Yarn · · Score: 1

      My notes[pdf,344k] on the subject, a nice table if I do say so myself.

      ps: strange:
      -rw-r--r-- 1 yarn staff 344111 Nov 6 11:56 Cryptonotes.pdf
      -rwxr-x--x 1 yarn staff 309915 Jul 28 2002 notes.pdf

      The original (notes.pdf) is from dvipdfm, the selected page were extracted with MacOSX Preview.app. Must be some poor creation routines there.

      --
      -Yarn - Rio Karma: Excellent
    4. Re:Won't work... by dido · · Score: 1

      Right. But well, some people have attempted to develop quantum authentication protocols like this one, this one, and this one. Dunno if the device in question does any of them, or even if any of them are actually practical to use with today's technology. If the device in question doesn't use quantum authentication of some kind, well, they're selling snake oil, but I wouldn't dismiss the whole concept of quantum cryptography out of hand totally the way you seem so ready to.

      --
      Qu'on me donne six lignes écrites de la main du plus honnête homme, j'y trouverai de quoi le faire pendre.
    5. Re:Won't work... by ysachlandil · · Score: 1

      All these quantum authentication protocols use secret key crypto as a basis. So Alice and Bob have to exchange a secret key before using the system. Might as well use the secret key to encrypt the messages they want to send to each other.

      Now if somebody finds a nice secure way of exchanging secret keys that is not susceptible to a man-in-the-middle attack, this quantum crypto stuff might be worth looking into, until then just use RSA/AES.

      --Blerik

    6. Re:Won't work... by ThisIsFred · · Score: 1

      I don't know if you guys have noticed this, but that darned Eve has been causing a lot of trouble since Applied Cryptography came out. I think at this point, we can label her a terrorist, and have her investigated.

      --
      Fred

      "A fool and his freedom are soon parted"
      -RMS
    7. Re:Won't work... by dido · · Score: 1

      Well, some modern protocols (e.g. Kerberos) still require you to exchange symmetric crypto keys beforehand. I suppose these could be useful in situations similar to those. You could in theory build a quantum crypto-based Kerberos variant using these protocols.

      --
      Qu'on me donne six lignes écrites de la main du plus honnête homme, j'y trouverai de quoi le faire pendre.
  30. photon encryption? by Gorny · · Score: 1

    With the current hype about everything which ascends the term Quantum I'd prefer this to be called photon encryption. It's principles are known for ages and are even put into practice by some scientists and it does not what it has s to do with the things people associate quantum with.

    --
    Alan Perlis once said: "A language that doesn't affect the way you think about programming, is not worth knowing"
  31. Re:Curses! Foiled again! by Anonymous Coward · · Score: 0

    I thought your un-joke was quite funny, actually...

    (ducks)

  32. Brassard's paper by dido · · Score: 3, Informative

    By the way, I've found a link to the paper I mention above. It's the paper by Charles Bennett, Francois Bessette, Gilles Brassard, Louis Salvail, and John Smolin, "Experimental Quantum Cryptography" (Citeseer link).

    --
    Qu'on me donne six lignes écrites de la main du plus honnête homme, j'y trouverai de quoi le faire pendre.
  33. over optic cables and ethernet! by Anonymous Coward · · Score: 0
    i RTFA and me friggin brain melted. so dont say RTFA!

    Isnt the point of getting encrypted messages not only to protect them, but to be able to recieve them and decrypt them for reading. One very unsavory person with scissors could be very very dangerous in that situation. Over optic cable, i do not care that if it is view it changes, why not view it just disrupt communication. Isnt the next best thing to not being able to decrypt a message making it so that others cannot read it? .

    the strongest system always has a weak link.

    im illiterati in this situation so if you dont like what i say, thiink im stupid, good, i admit it.

    1. Re:over optic cables and ethernet! by Anonymous Coward · · Score: 0

      Actually, optical cables can be stored underground or the data can be transmitted with microwaves for a mile (yes, even with Quantum Cryptography)

  34. Re:Curses! Foiled again! by KDan · · Score: 4, Funny

    Bah, who's the evil mod with a twisted sense of humour who modded my post +1 funny? Come out and fight fair!! :-P

    Daniel

    --
    Carpe Diem
  35. We need QPGP, QPQ, PQP or something by KjetilK · · Score: 1
    A couple of years ago, there was an interview posting with PRZ where I asked about quantum computing and quantum cryptography (were the answers ever posted?) They are technnically two quite different beasts, but both should be kept in mind when considering future cryptgraphy needs.

    I think we really need some quantum cryptography that will stand when large-prime-based methods fail... Are there any good hackers working on this?

    --
    Employee of Inrupt, Project Release Manager and Community Manager for Solid
  36. Can't easily produce single photons on demand by JonyEpsilon · · Score: 1

    It's straightforward to produce single photons - just turn on a lamp, you'll get loads of them !

    These Q cryptography schemes don't need single photon generation on demand, which is the tricky thing (although good progress is being made). It's sufficient to use a dim light source, such that the mean photon number is low.

  37. Re:The truth about quantum computers by frovingslosh · · Score: 1

    you forgot off-topic. The topic is quantun encryption. The poster in question tried to do all of the things you listed (like karma whoring) by going off-topic and talking about quantum computing. mod grandparent down!

    --
    I'm an American. I love this country and the freedoms that we used to have.
  38. Re:The truth about quantum computers by John+Courtland · · Score: 1

    Seriously, you're dead on. Quantum entanglement is not the whole of the computer, and the states aren't just 0 and 1. There's a number of quantum states, not just two. And I'm pretty sure the computer works off of an averaging scheme, in a chamber of gas where values are assigned and reported with lasers (a purely quantum device).

    --
    Slashdot is proof that Sturgeon's Law applies to mankind.
  39. USELESS!! by logicnazi · · Score: 4, Insightful

    So even if this is really workable quantum cryptography, in which case it would only work on a direct fiber to fiber link. I don't see how it would give any benefit.

    From a technical point of view Quantum cryptography is only secure against man in the middle attacks if you have a SEPERATE channell to the remote host that you are absolutely sure in fact goes to the right person. As long as all communication goes over the fiber nothing prevents a spy from splicing his own box into the line and negotiating a key using quantum cryptography for both parties. However, if you have some channell that you know reaches the other source you can just use Diffie-Helman or like protocal to negotiate a shared key without ever broadcasting it on the line.

    The only think quantum cryptography does for you is take the public key component out of the equation. However from reading the article this box just uses quantum encryption to negotiate a key for 3-DES or similar. Seems to me that the public key is not the weakest link in the system. Also as it does packet based encryption you can still watch and time packets to observe keystrokes (I believe good ssh and the like programs wait for several seconds to try and send a bunch of keystrokes together, but a box that sits outside the computer can't decode the first layer of encryption to stick the packets together in a meaningfull way...though I could be wrong on this).

    From a pragmatic point of view, since this is only going to work on an unbroken single fiber there is some limit to distance here. I'm sure someone else on slashdot knows about how long you can string fiber before you need a repeater or something. Wouldn't it be easier to just routinely check to make sure there is no middle man inserted in the wire (use diffie-helman or similar again so that someone JUST listening can't decode things). Even better, take a key generated on the first computer BY HAND to the other end of the communications loop. Better cheaper security with no new high tech gizmos.

    --

    If you liked this thought maybe you would find my blog nice too:

    1. Re:USELESS!! by Anonymous Coward · · Score: 0

      As soon as there's a man in the middle there is a huge (I mean 1 in 1,000,000,000 against) chance of the data being changed, and it will be unreadable.

    2. Re:USELESS!! by ph43thon · · Score: 1

      as the other guy said, "man in the middle alters the data." When they compare a sample subset of the negotiated key, it will not match up, so they will know someone is listening in.

      though, as always, the distance issue is the problem. Also, if someone ever figured out a way to calculate the exponent for (a^x)mod P or whatever.. then the RSA keys would be no good.. As for Quantum Key Exchange, you'd have to find a parallel universe with no Uncertainty Principle.

      It's a good way to generate a new onetime key for communicating with a new contact.

      p

      though, the idea that someone in the middle could effectively impersonate both the sender and receiver without them being able to tell is interesting. Essentially, the attacker would have to go through the entire key exchange process to establish a key with one person. THEN manage to transmite the exact key to the other. But this is effectively impossible since even the sender doesn't know what the key will end up being. THey send photons randomly polarized in certain 'directions' and the receiver randomly detects the photons using a polarized filter.. THEN they compare their actions to decide which bits of information to use as their key.

      But, I believe the attacker would be able to select the comparison subset in a way that would ensure the final key would be what he needed. Hmm, neat, it seems like that works. A simple way to see that is by transmitting the first bit you need five times in a row using your polarization scheme.. then do the next and the next etc.. Do it in whatever way that you could be relatively certain that the receiver would get at least one of each of the bits for the key you wanted.. then whatever repetition they got, just extract that by using it as your subset for checking the integrity of the transmission.

    3. Re:USELESS!! by ThisIsFred · · Score: 1

      Wouldn't it be cheaper to just run ethernet cables through a thick steel conduit? It may not have kewl photon technology involved, but it's pretty hard to saw or drill a steel pipe without attracting attention. Maybe if the companies in question did their wiring the right way, wire taps wouldn't be such a problem.

      Actually, I think if I was a government agency looking at subcontractors, I would check out this sort of thing. "What's that? You run your netowrk cable over standard wiring ladders and drop it through hollow walls? Wow, not very good security practice. Sorry, you don't get the contract."

      --
      Fred

      "A fool and his freedom are soon parted"
      -RMS
    4. Re:USELESS!! by Anonymous Coward · · Score: 0

      >I believe good ssh and the like programs wait for several seconds to try and send a bunch of keystrokes together
      I don't know about current releases of SSH but I went to a lecture in August 2001 where Dug Song and Solar Designer demonsterated that SSH password length could be sniffed with high reliability. If I remember rightly (possibly not) they could tell when it changed to not echoing characters to the screen and back again. They talked about padding with dummy data but said not all SSH client support it.

    5. Re:USELESS!! by shadowpuppy · · Score: 1

      Actually it could be much harder than it seems. They could sign the key and exchange signatures.

      The problem with the man in the middle attack is you have to do it quickly and at the right time. Otherwise you screw up a key exchange while you're connecting. And if they use say a digital signature on the keys then all your keys end up invalid. Then your only window of attack is before the inital key exchange. Even that could be foild by Alice and Bob checking thing over an out of band channel.

      The big limit here is the physical connection. That really limits what can be done with it. On the other hand some companies may not mind that. If it's physically possible to set up the link then someone will probably find it worth paying for.

    6. Re:USELESS!! by Anonymous Coward · · Score: 0

      Except it would have to be a damned expensive box.

      You'd have to splice a separate quantum crypto box into the line. And I bet you couldn't use their $50-$100k commodity hardware - you'd probably need something custom built. This makes it much more expensive to man-in-the-middle your attacks, which is really what this is about. No security is unbreakable; the guiding principle is to make it too expensive for your expected attackers.

    7. Re:USELESS!! by logicnazi · · Score: 1

      The point being that to work Quantum crypto requires that extra step of comparing results with the other party, i.e. some sort of communication method which, while possible tapable is at least guaranteed to actually contain a response from the party you wish to speak to.

      Simple explanation: without some sort of predistrubuted secret or known communication channel (not necessarily secure but guaranteed to not allow a blocker to impersonate the other party) you have no means of knowing WHOSE quantum crypto box you are talking too.

      --

      If you liked this thought maybe you would find my blog nice too:

  40. Terrorists by hajejan · · Score: 2, Insightful

    I know. You didn't want to hear that. But criminals, terrorists and other government agencies are the first to use this type of technology.

    Kind of like the whole quantum computing thing. We sit around on projects like distributed.net trying to crack a 64 bit key. Nobody knows if the CIA has a quantum computer already, and nobody knows if they are having a laugh at our efforts, while they are able to crack any key in a matter of hours / days.

    In other words: Quantum cryptography, which by the very nature of it is secure from being tapped (read Stephen Neal's "Cryptonomicon" for the light version, or jump in and get some of the real books on cryptography for the heavier stuff, such as "The Code Book" or similar) is a valuabe resource for anyone who wants their data hidden.

    H

    --
    The Mini Repository - more links
    1. Re:Terrorists by God!+Awful+2 · · Score: 2

      Criminals & Terrorists? If only we were so lucky! Heh... I imagine that this technology requires dedicated fiber, so you can only communicate from point A to point B. Remember that we were trying to track Osama Bin Laden by his cell phone. If he had to go to a specific, fixed location every time he wanted to make a phone call, we'd have got him by now.

      -a

    2. Re:Terrorists by pmz · · Score: 1


      Osama Bin Laden with a cell phone in a movie theater. Will the terror never end?

    3. Re:Terrorists by Anonymous Coward · · Score: 0

      Why everything in this fu***ng world must be related with terrorists? are you afraid? really? what really scares me is the government of US.

      Terrorists haven't still used nuclear bombs (USA does: Hiroshima, Nagasaki), haven't used spy satellites (USA does: Echelon), haven't lied to invade foreign countries (USA does: Irak, Afghanistan, Granada, Panama...), haven't used biochemical weapons in so many wars (USA does: Vietnam, Iran through, now your enemy, Irak)...

      So don't get wrong. What the rest of the world really fears for is the oil-stealer-monkey you have as president in the White House.

      No, i'm not arabian, vietnamese, chinese, indonesian, cuban... i'm from Spain, one of your supposed allieds. Can you see how lonely you are?

      What really worries me about quantum cryptography is the use CIA, NSA, FBI, Pentagon... will give to it, aimed to reduce even more our freedom (the freedom of the rest of the world, not yours).

      Good luck

  41. Nothing quantum here ! by dragonfly28 · · Score: 2, Insightful

    Too bad that this is no real quantum crypthography here.

    They just use quantum cryptography to generate the keys. In my opinion there are better ways to get a key since the real encryption is still based on standard techniques like DES. Everybody knows that these can be bruteforced....

    So the real Quantum Encryption still lies in the future

    1. Re:Nothing quantum here ! by Anonymous Coward · · Score: 0

      Ehm ... I think I am mentioning this for the n-th time on slashdot, and I think I am not the only one, but just because I feel I can do something useful for the community, here I go again.

      there is no quantum encryption

      Quantum Cryptography provides a way for secure secret key agreement, and yes, it is one of the best way to do so, unless if you have your own satellite you trust generating random bits somewhere in the atmosphere. If you know other ways for generating key in an information theoretically secure way you are welcome to explain them here and to the community.

      Normally you would use the OTP, but because this requires keys as long as the plain text, this gets very very very very slow using this devices. So they use DES. It's not information theoretically secure, but it's enough for what they need. They could use any other symmetrical cryptosystem. This is the classical part you always have, which has no relation with the qc protocol.

    2. Re:Nothing quantum here ! by Anonymous Coward · · Score: 0

      Too bad such a nonsense is moderated as insightful.

    3. Re:Nothing quantum here ! by borgboy · · Score: 1

      They just use quantum cryptography to generate the keys

      Quantum techniques are applied not to key generation, but key distribution. This is a crucial distinction.
      Also, if you think you can bruteforce AES in a useful amount of time, have a ball. The people spending this kind of money on a QKD system are likely going to be picking appropriatly large key sizes for their message traffic.

      --
      meh.
  42. A question of time... by keoghp · · Score: 1

    One thing is for certain... it will get cracked.

    If it was a MS product, it would get cracked quicker.

    --
    For problems, seek only the simplest solution, complexity brings with it more problems.
    1. Re:A question of time... by Anonymous Coward · · Score: 0

      No, I'm pretty sure that you can't circumvent the laws of physics...

    2. Re:A question of time... by keoghp · · Score: 1

      Godel

      --
      For problems, seek only the simplest solution, complexity brings with it more problems.
    3. Re:A question of time... by Anonymous Coward · · Score: 0

      I'm sorry, how is incompleteness relavent to this?

  43. Oh no by jabbadabbadoo · · Score: 1

    I'm sure M$ has an implementation going too. Be prepared for polarization bugs!

    1. Re:Oh no by Anonymous Coward · · Score: 0

      pffft...how long did it take you to come up with the lame ass MS slam? Thanks for posting and forcing me to waste my time replying to an utterly retarded fanboy. I was gonna mod you down but wanted to let you know in person that it is pretty sad how stupid you sound.

    2. Re:Oh no by jabbadabbadoo · · Score: 1

      Thanks, anonymous coward, for 'telling me in person'.

  44. Lies.... by Anonymous Coward · · Score: 0
    which it claims is the first commercially available device of its type.

    This is wrong. Another company already has Quantum Key Distrubution for sale:

    www.idquantique.com/kqd.html

    Jeroen

  45. It's "FUTURE PROOF"! by 73chpr4x1$ · · Score: 1

    I watched a their presentation. It was typically marketingtastic until we hit the phrase it's FUTURE PROOF...that's inspired! Well actually it's nicked (or to be fair simultaneously invented!) from a company called brabantia www.brabantia.com who make kitchen appliances! All technical/poltical discussion aside...I think that's funny. As for someone attempting to make a company on this...good on ya. Let me know when it's done. ;)

  46. Old news by Gothmolly · · Score: 0, Offtopic

    Seen on Yahoo! 2 days ago.

    -1, Boring.

    --
    I want to delete my account but Slashdot doesn't allow it.
  47. Finally! A breakthrough! by Shoten · · Score: 1

    Something that can both be vaporware and NOT be vaporware at the same time!

    --

    For your security, this post has been encrypted with ROT-13, twice.
  48. "They" CAN produce single photons by Legendre · · Score: 1

    Of course they can produce single photons. You must have missed that issue of Physical Review Letters (only the most pretigious journal of physics), here's a copy of the article:

    Deterministic Single-Photon Source for Distributed Quantum Networking

    PS: Note the "deterministic" part.

  49. signing, everyone? by mennucc1 · · Score: 1

    I went in July to a seminar of a group that studies Q.C. (won't say who they are). They repeated (several times) phrases as "q.c. is the future" and "standard crypto will be substituted by q.c.". It was really funny (to say the least) considering that q.c. only enables to: "send a data stream along a single fibre so that receiver can detect tampering".
    So I agree that it is perfect for distributing secret keys, and other similar applications. But I had to force myself to not ask these questions: What about sending data in the internet as large? What about data signing?
    The 1st question has been asked by other /.ers; the second is worth at least some remarks.
    Data received thru q.c. is as secure as the server where it is stored; photons cannot be stored.
    Suppose that Alice wants to send data to Bob so that Bob knows that Alice sent it. Suppose also that Alice host is secure (otherwise,So, while q.c. could substitute conventional data signing for short-time applications, when we want to sign data so that the signature can be verified at a later time, q.c. is not the answer: photon

    1. Re:signing, everyone? by ph43thon · · Score: 1

      The issue of data signing for some "later time" seems impossible. It's like asking, "How can I be sure that Alice didn't think one thing and now she's telling me something different?" You can't know, you can simply trust them. Bob's computer has Alice's info on it. It doesn't seem to be compromised.. is Alice's info the same? I think so.. There's always some level of distrust.. (theoretically) Maybe Alice could calculate some sort of checksum for her message, memorize it and destroy the physical evidence. Then she could travel to Bob and calculate the checksum of the info he has from her.. if they match.. then maybe that authenticates it. Then again, why was the info transmitted in the first place, why not just wait for her to drop by? You can't be certain that someone you talk to on the phone or over a video link or even in front of you is really who they say they are.. so.. what would be a convincing way to establish integrity of a message?

  50. Don't kill the cat by CausticWindow · · Score: 1

    Commit quantum suicide instead.

    --
    How small a thought it takes to fill a whole life
  51. Re:The truth about quantum computers by Quixadhal · · Score: 1

    So, it really is CLOSED SOURCE. :)

    (I'm not yelling you lame lameness filter, trying putting some sanity checks into your percentage calculation!)

  52. Mod parent down -1: Xerox Machine (also fag) by YOU+ARE+SUCH+A+FAG! · · Score: 0

    Way to you anti-slash, fag-master.

    Can't write your own +5 comments? Maybe it's because you're too busy sucking cock.

  53. Re:The truth about quantum computers by Anonymous Coward · · Score: 0

    sigh...
    =====Quote======
    Quantum encryption is based on the fact that quantum states cannot be measured without altering.
    =====Quote======

    You've got it 90% right but...quantum encryption requires entaglement. And entanglement doesn't really refer to superposition of states. It refers to two particles which share a state such that if one is changed the other is changed regardless of distance. Now it is connected to a superposition of states because of they whole obeserve=alter thing but you misidefined the term.

    Both are really intersting and much of the other problems you describe are very real and very difficult. It's going to be an interesting ride over the next 20 years.

  54. To all the man in the middle people by Desult · · Score: 2, Informative

    Claiming this is useless because it falls to man in the middle attacks is totally false.

    Firstly, noone is saying QKD is perfect, or secure from highly sophisticated MITM attack, or anything of the sort. It claims to be secure from what amounts to a wiretap, which it entirely is. It is also secure from anything but the most sophisticated and perfectly executed MITM attack, because of the fragile nature of the quantum communication.

    The only way the BB84 protocol can be subverted by a man in the middle attack is by totally fooling Alice and Bob into thinking they are talking to each other, when in fact they are talking to Eve.

    Rather than:

    C:A--E--B
    Q:A--E--B

    It would be:

    C:A---E E---B
    Q:A---E E---B

    Certainly this is possible. But with this kind of scheme, Diffie-Hellman, or whatever else you want to pimp as "better" cause you're more familiar with it, would fail as well. At the current moment, with current technology, quantum key distribution is secure as any other key distribution method. There is no MORE secure pure KD method to my knowledge. There certainly may be more practical, but in terms of feasibility of breaking, QKD via BB84 is just about as good as it gets.

    Sure, it has flaws... sure, it may be useless to 90% of people and inappropriate for 5% of the remainder, but it is not "worthless."

    -Greg

    --
    -Greg
    1. Re:To all the man in the middle people by ysachlandil · · Score: 1

      I'm not trying to 'pimp' DH as better, I'm just putting quantum crypto into perspective. Most people think of quantum crypto as the 'holy grail of crypto'. This is clearly not the case until somebody invents a quantum way of authenticating somebody.

      Quantum crypto 'solves' the key exchange protocol. DH 'solves' the key exchange protocol. Quantum crypto might be safer. The problem is still authenticating Alice and Bob. The only way to do that in a useable way is public key. When you use public key you are dependant on the fact that nobody can factor big numbers. When using DH you are also dependant on that problem (okay, equivalent problem). Your weakest link is 'nobody can factor big numbers' whether you use Quantum crypto or public key crypto. Might as well use public key then, a lot cheaper.

      What I'm trying to say is that Quantum Crypto is a very expensive 'solution' that is looking for a problem, and until quantum authentication is useable, nobody should be implementing it except for research purposes.

      Just my 2 cents

      --Blerik

  55. Market or not, by Anonymous Coward · · Score: 0

    Imagine a beowolf cluster of these!!

  56. Bars on the windows, but the front doors wide open by rumblin'rabbit · · Score: 1

    The power of encryption methods is not the problem these days - it's the people using the system. What's the good of QC or 4096-bit encryption codes when users e-mail their password to associates across the continent in plain text? We put bars on the windows and leave the front door wide open.

  57. Re:Curses! Foiled again! by jabber01 · · Score: 1

    This message was encrypted with quantum cryptography... I saw the key here, someplace, a minute ago, but I have no clue where it's gone.

    --

    The REAL jabber has the user id: 13196
    What you do today will cost you a day of your life

  58. Re:Bars on the windows, but the front doors wide o by Overzeetop · · Score: 1

    Hey, if I didn't tape the Post-It(tm) with my password to my monitor, then it might fall off after a year or so, and then how would I log in? Answer me _that_ mr. smartypants!

    Okay, I don't really have it taped to my monitor. I have a card in my pocket with 200 random characters in a single string (numeric+mixed case). From that I chose an 8 character passwod every so often, sometime forwards, sometimes backwards. I refer to it for the first couple of days until the password is learned by rote. If I need an old password, i only have to remeber a couple of characters to be able to find it in the pattern. And no one is going to guess that my password is P5huIy68, or whatever. It also covers almost all of the rules of most systems (except my bank, which has to have a symbol, so I append one). And yes, that's an old one I typed in. In the worst possible case, I'm no more than 400 tries (including wrapping) from the correct password.

    You're right of course, users are most of the problem. But the untrustworthiness of systems is the other. Do you trust Microsoft Passport? I know I don't. I'd rather send my cc# plaintext and review my statement carefully every month rather than store my data on M$ servers. (I only use 1 time CC#s on the'net now, FWIW).

    --
    Is it just my observation, or are there way too many stupid people in the world?
  59. "Quantum Intrusion Detection" by Jerf · · Score: 1

    Yeah, but the point is that in a good implementation of such a system, no third party would be able to listen to the quantum-encrypted data without changing it - at which point Bob and Alice would know that the there was an eavesdropper (or that the system had gone bellyup).

    This is why I generally insist on calling this technology "Quantum Intrusion Detection"; it adds little or nothing to the "Cryptography" aspect of the communication. It's only contribution is the ability to add 100% provable intrusion detection to the link, which means that once detected, you can shut the communication down. As I understand it, it does NOT protect the communication if you insist on continuing to send it after intrusion is detected any more then conventional cryptography does; the intercepter can get the bits (but still faces a serious problem with decrypting the communication conventionally).

    Yes, it has "cryptography" as part of the technology but that's not its distinguishing feature.

  60. Karma Bum, and the Dulolz legend by Syncroswitch · · Score: 1

    I for one welcome our new quantum lords, And I offer them a gift of Schrodinger?s perpetually floating feline. (you know, the one in the black box with buttered toast glued to his back)

  61. Re:Curses! Foiled again! by Anonymous Coward · · Score: 0

    Hmm...every time you insult moderators sense of humor, they think you're joking which only really proves your point.

  62. Re:Curses! Foiled again! by Anonymous Coward · · Score: 0

    Come on, "solar-powered flashlight" is hilarious. You know, because you don't need a flashlight when you're in direct sunlight. You don't even get your own jokes.

  63. Re:YOU SIR ARE A FUCKING COMEDIAN by Anonymous Coward · · Score: 0

    That was trollish flaimbait, but I have to say, it was pretty damned funny.

    yoda doll... where do you come up with this...

  64. Re:Curses! Foiled again! by KDan · · Score: 3, Funny

    It may be funny in some contexts, but NOT in the context of a thread about some new solar power cells. It simply made no sense in that context. Not only that, but it's a very well-worn joke. Certainly most people will have heard the expression before. Why would a solar-powered flashlight become achievable because of cheap power cells? If I had said "affordable" possibly someone with a bad sense of humour could have found it funny, but with "achievable", wtf?

    Next in my experimentation I will post something which actually does not make any sense at all, not even grammatical, but looks like a joke. I bet it'll be modded up funny, too.

    Daniel

    --
    Carpe Diem
  65. Re:Curses! Foiled again! by Anonymous Coward · · Score: 0

    are there this many strigent rules on all jokes? now im afraid that if i laugh a joke people might think im stupid cause it wasnt supposed to be a joke in the first place....

    i think im goign to cry....

    Moose

  66. Re:Curses! Foiled again! by Anonymous Coward · · Score: 1, Funny

    Something like this?

    Q: How many SCO chickens does it take to cross the road?

    A: 100. One to cross the road, and 99 to sue IBM.

    Is this not funny enough to be funny? Probably not. Please ignore me.

  67. Re:Curses! Foiled again! by fizbin · · Score: 1

    The problem is that slashdot's moderation system encourages a result that looks like "the moderators as a whole thought that this was /really/ funny" when the cause is just "five different people saw this and gave it a funny moderation".

    Thus the key to high karma: post replies that are likely to get some positive moderation (any at all) to articles that are posted early. Getting modded up rarely has anything to do with quality - it's all about getting in front of the moderators, which is all about appearing near the top of the comments page when the comments are viewed threaded, highest scores first. (Since almost no moderators follow the advice to read slashdot nested, newest first)

  68. Worthless, still must have phys security on fibre by Anonymous Coward · · Score: 0

    Simply: You could design a repeater and quickly splice it into the cable, like between those slow bits with an gun that cuts and connects to two transceivers in say 1/1000th of a second.

    The hard part is that the repeater would have to do everything that transceivers at either end of the cable would do, but if I designed the hardware at each end and I designed the repeater and I had snapshots of the internal states of both ends to feed into the repeater it could be done and they could not tell they were being watched.

  69. Where's the cat? by Brett+Glass · · Score: 1

    The company's press release mentions a "single photon generator," but neglects to mention the cat that must be included inside the box for Heisenberg's Uncertainty Principle to work. It also doesn't mention kitty litter, catnip, or other necessary supplies. Perhaps they're using Cat5?

  70. flipping a coin over the phone by 0ptix · · Score: 1

    it seems to me that quantum entagelment as you have explained it (and its limitations) can be used for another basic problem in cryptography "flipping a coin over a phone".

    the senario is a follows: Alice and Bob need to agree upon a random bit. i.e. one which neither Alice or Bob can influence (significantly) yet neither can verify that the other is following a given protocol (because they are on oposate ends of the line). Given some common intractability assumptions such as factoring or the DLP there are several exponentialy asymptoticly secure solutions. In other words they are not absolutely secure, just statisticaly and they are based on un proven grounds.

    Now what if Alice and Bob at some previouse point in time set up a pair of entangled particles between them. (This is akin to setting up a tellephone line between them.) Well I geuss the rest is pretty clear. At a predefined time, or one dynamicaly agreed upon through insecure channels each reads the state of their partical and there u have your random bit with absolute certainty that neither party influenced the outcome. (aditionaly, though not neccesary, both Alice and Bob can be sure that no other party knows the bit.)

    hm....

    am i completely off?

    1. Re:flipping a coin over the phone by QEDog · · Score: 1

      That's a good example of what Quantum Teleportation is.

      --
      "There is no teacher but the enemy."-Mazer Rackham
  71. not crypto by harkabeeparolyn · · Score: 1

    This is an intrusion detection system, not cryptography.

  72. Running into the fencepost by jeremycec · · Score: 2, Insightful
    Coming up with better and better encryption schemes is moot at best.

    As Bruce Schneier says super-encryption technologies are like a single, indestructible fence post anchoring a much weaker defense curtain. The defense is indestructible only so long as the enemy runs directly into the fence post. However, it's much easier to circumvent the fence post and cut through the fence. Social engineering, poor policies, key theft and other routes make it much easier possible for hackers to get around conventional forms of strong encryption. And quantum computing is no different.

    "Quantum cryptography has the potential for making the strongest link, in a series of very weak links, even stronger," Schneier says.

  73. Re:Curses! Foiled again! by Fjord · · Score: 1

    what would be nice, is if slash had the ability to store two comment view preferences: one for when you are not moderating and one for when you are. That way it could automatically switch to nested, newest first when modding.

    --
    -no broken link
  74. You mean by Craig+Davison · · Score: 1

    "The Code Book" is the light version. Heavier volumes include "Applied Cryptography".

    I'm not trying to be elitist here. "The Code Book" really is an easy read. It was designed to be.

  75. Re:Curses! Foiled again! by LordIvan · · Score: 1

    Humour isn't just rules - I just looked at and laughed, even though it was actually a rather insightful comment.

    Yes, entirely true - The mythical solar powered torch IS more likely as solar cells get cheaper, and batteries better.

    huh. go figure. It's kind of funny the way you played on peoples 'perceptions', you know. In fact, _really_ funny the way you fooled me too.

  76. A BSOD message from Quantdoze ZP by Anonymous Coward · · Score: 0

    A BSOD message from Quantdoze ZP:

    This program as performed all illegal operations simultaneously and will be shut down.
    Since your program now has no momentum there is no way to tell where to restart.
    Any attempt at reading the error logs will destroy them.

    Have a nice day!

  77. Re:Curses! Foiled again! by ModsOnCrack · · Score: 1

    What would be better is if the moderators rated the damn posts, rather than just bumping it up.

    Moderator A, on crack, thinks the solar powered flashlight is just about the funniest thing in the world... rates 5, Funny

    Moderator B, also on crack, thinks the post is a troll and marks it -1, Troll

    Moderator C, not on crack (where is this guy?? He's like the Yeti), thinks the post is sorta funny, but not THAT goddamn funny, rates 2, Funny.

    Moderator D, on bad crack, thinks it's partially informative, and rates it 3, Informative.

    Moderator E, on LSD and crack together, thinks he read an amusing tale about a radioactive badger, and gives it 2, Offtopic.

    total: 11/5 = 2.2, Funny (majority of tags, but keep the little % scores box... 40% Funny, 20% Offtopic, etc)

    --
    The mods are on crack
  78. Not the first by eddeye · · Score: 1
    A spin-off from University of Geneva has been selling similar devices since 2002.

    Note that quantum cryptography is a misnomer for the BB84 and BB92 protocols. These should be called quantum key distribution because that's all they do. You can't encrypt information with them, just exchange keys. You still need conventional crypto to use the keys with.

    Also keep in mind you need a dedicated fiber link between the communicating parties. Quantum crypto is only useful in ultra-paranoid, damn-the-expense applications (military, govt). For the majority of uses, it's not a practical improvement over public-key cryptography (or even private-key for that matter).

    --
    Democracy is two wolves and a sheep voting on lunch.
  79. Re:Curses! Foiled again! by iNetRunner · · Score: 1

    Actually I read that post.. Didn't find it funny and wondered what I'm not getting.. Figures.

    --
    Store with salt
  80. Quantum Communications by saramakos · · Score: 1

    So tell me - if someone later invented quantum communications, would a quantum link simultaneously be both up and dead until you observed it?

  81. Quantum Cryptography is really just key exchange by xquark · · Score: 1

    Amidst all the hype of techno babble surrounding Quantum cryptography,
    people fail to recognizes what it really is, and what it is capable of
    doing.

    In short Quantum cryptography is nothing more than a key-exchange model to
    support symmetric ciphers and such. It is just one of the links in the
    chain which is called a cryptosystem. Hence the old adage still applies,
    and that is "you are only as strong as your weakest link". People shouldn't
    be under the impression that just because scientist and famous
    cryptographers are saying that the quantum key exchange is very difficult
    to foil that there is no other way of getting around a cryptosystem that
    uses quantum cryptography as a part of their system.

    Well thats been my 2 cents.


    Arash Partow

    --
    Arash Partow's Philosophy: Be a person who knows what they don't know, and not a person who doesn't know.
  82. NOT the first commercial launch by gracefool · · Score: 1

    MagiQ is NOT the first company to sell a quantum encryption system, ID Quantique was, last year.