Slashdot Mirror
BlackBerry Races Ahead of Security Curve With Quantum-Resistant Solution (techcrunch.com)
An anonymous reader quotes a report from TechCrunch: Quantum computing represents tremendous promise to completely alter technology as we've known it, allowing operations that weren't previously possible with traditional computing. The downside of these powerful machines is that they could be strong enough to break conventional cryptography schemes. Today, BlackBerry announced a new quantum-resistant code signing service to help battle that possibility. The solution, which will be available next month, is actually the product of a partnership between BlackBerry and Isara Corporation, a company whose mission is to build quantum-safe security solutions. BlackBerry is using Isara's cryptographic libraries to help sign and protect code as security evolves.
"By adding the quantum-resistant code signing server to our cybersecurity tools, we will be able to address a major security concern for industries that rely on assets that will be in use for a long time. If your product, whether it's a car or critical piece of infrastructure, needs to be functional 10-15 years from now, you need to be concerned about quantum computing attacks," Charles Eagan, BlackBerry's chief technology officer, said in a statement. Some of the long-lived assets include aerospace equipment, connected cars, or transportation infrastructure -- basically anything that will still be in use several years from now when quantum computing attacks are expected to emerge.
"By adding the quantum-resistant code signing server to our cybersecurity tools, we will be able to address a major security concern for industries that rely on assets that will be in use for a long time. If your product, whether it's a car or critical piece of infrastructure, needs to be functional 10-15 years from now, you need to be concerned about quantum computing attacks," Charles Eagan, BlackBerry's chief technology officer, said in a statement. Some of the long-lived assets include aerospace equipment, connected cars, or transportation infrastructure -- basically anything that will still be in use several years from now when quantum computing attacks are expected to emerge.
Why would anyone trust them after this article:
https://www.forbes.com/sites/t...
How is this better than AES-CMAC?
Quantum only affects asymmetric cypher's mainly used for key distribution as far as I know.
Symmetric cypher's like AES should be unaffected if you just up the number of bits a bit.
Those last 2 sentences read like the blurb you get when someone is just randomly adding technical words to something to make it sound like it actually is something worth having, but isn't.
Giving the benefit of the doubt here, does anyone have any links to technical papers about this quantum-resistant cryptographic solution?
It's simple. To make their hardware quantum-resistant they simply pushed it into the super position of being both off and on but unused. Their next step is to involve concrete.
BlackBerry Races Ahead of Security Curve With Quantum-Resistant Solution
So, does mean they won't run the latest versions of Firefox?
It must have been something you assimilated. . . .
It's a quantum resistant solution.
Err How does it work, what makes it quantum resistant, how long is it expected to be resistant
***Crickets****
Might as well be a press release for Blackberry.
If your product, whether it's a car or critical piece of infrastructure, needs to be functional 10-15 years from now
What do you mean, if it needs to be functional 10 years from now? My car IS 10 years old and in perfect working condition. It better damn well last another decade (barring people slamming into me which has happened).
This is the problem with technology. Anything over six months old is considered not worth it to keep around. A three year-old product is considered ancient.
If your product, whether it's a car or critical piece of infrastructure, needs to be functional 10-15 years from now, you need to disconnect it from an insecure network like the internet.
It IS actually that simple!
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
The problem isn't the checksum, nor how to make the checksum. The problem is how to know "what you expect" is correct, if it wasn't signed... by public:private crypto.
Nick Waterman, Sr Tech Director, #include <stddisclaimer>
Does quantum encryption solve the key escrow problem? Or would not implementing key escrow be necessary for that?
After what happened with BlackBerry, why would I trust anything they say or do? They are as trustworthy as RSA which is to say, not trustworthy at all.