Slashdot Mirror

← Back to Stories (view on slashdot.org)

Quantum Cryptography Ready For Wide Adoption?

Posted by ryuzaki0 on from the decode-this dept.

An anonymous reader points us to an interview with the founder of quantum cryptography pioneer MagiQ Technologies. From the article: "Q: When do you think we'll see service providers offer quantum cryptography services to their end-customers? A: This will happen within one year and we'll see fairly wide adoption within the next three years. We are working with big carriers such as Verizon and AT&T as well as some companies that own fiber networks. The goal is to embed quantum cryptography into the technology infrastructure so it becomes totally transparent to the end-user..." The cost of a pair of MagiQ boxes to implement point-to-point encryption on a 120-km link is $100,000 plus service.

2 of 125 comments (clear)

  1. Short answer by Rob+T+Firefly · · Score: 5, Funny
    Quantum Cryptography Ready For Wide Adoption?
    Yes and/or no.
    --
    Slashdot Burying Stories About Slashdot Media Owned
  2. Quantum Crypto does not solve anything! by tradeoph · · Score: 5, Interesting

    I can't stand all the hype around Quantum Crypto. If you have a close look at it, you'll see that it doesn't solve anything...

    When you transmit bits with QC the law of physics guarantee that nobody will see them, even if some genius breaks all the math behind classical crypto. This is all very well but the throughput is too low, thus QC is used to transmit a key which is then used to encrypt the data. Thus you still need symmetric crypto to encrypt your data.

    Now, something everybody seems to ignore: QC does not authenticate the transmission. I can buy two magiQ boxes and set up a man in the middle attack. QC can not prove whether you are exchanging bits with the original sender or with some monkey in the middle. To solve this problem the QC vendors suggest:

    • Physical monitoring of the fiber: if you can guarantee nobody touches your fibre, you don't need any crypto!
    • Using certificates: Ooops, so now we need asymmetric crypto too, so our QC system relies both on symmetric and asymmetric crypto. Why do we need QC for then?
    • Use a shared secret that is programmed into the boxes when they are delivered: If you already have a shared secret, you don't need to exchange a key with QC, you can derive the key from your shared secret...
    So even if you use QC, you still need to rely on all the classical crypto to make it work. So it is just as good as classical crypto, without routing.