Microsoft Adds Post-Quantum Cryptography To an OpenVPN Fork (bleepingcomputer.com)

An anonymous reader writes: Microsoft recently published an interesting open source project called "PQCrypto-VPN" that implements post-quantum cryptography (PQC) within OpenVPN. Being developed by the Microsoft Research Security and Cryptography group, as part of their research into post-quantum cryptography, this fork is being used to test PQC algorithms and their performance and functionality when used with VPNs.

Microsoft's PQCrypto-VPN is published on Github and allows anyone to build an OpenVPN implementation that can encrypt communications using three different post-quantum cryptography protocols, with more coming as they are developed. These protocols are: (1) Frodo: a key exchange protocol based on the learning with errors problem (2) SIKE: a key exchange protocol based on Supersingular Isogeny Diffie-Hellman and (3) Picnic: a signature algorithm using symmetric-key primitives and non-interactive zero-knowledge proofs.

Comments

Picnic is already broken.

[CajunArson]

Picnic might be secure from quantum computers.

But its basket structures are clearly vulnerable to bear based attacks where the attacker is mathematically proven to be smarter than average.

Re:Picnic is already broken.

[Roger W Moore]

But its basket structures are clearly vulnerable to bear based attacks where the attacker is mathematically proven to be smarter than average.

That's definitely a major boo-boo.