Addressing post-quantum cryptography with CodeQL(github.blog)

13 pointsby todsacerdotivor 3 Jahren3 comments

Addressing post-quantum cryptography with CodeQL

https://github.blog/2023-12-05-addressing-post-quantum-cryptography-with-codeql/

3 comments

[deleted]vor 3 Jahren

kageiitvor 3 Jahren

I setup codeql locally to do some simple taint analysis recently. I found the tooling very powerful but quite complex to use. Updating the codeql database after making code changes was quite slow as well which made it harder to do incremental analysis.Can't imagine the complexities involved with quantum computing code analysis.

sidcoolvor 3 Jahren

The article makes it seem like large scale quantum computing is around the corner. If so, military likely already has it even if in a primitive form.

tptacekvor 3 Jahren

I'm no expert but I do pay attention and I don't know of anyone working in this space that believes it's right around the corner. What's motivating a lot of PQC work --- besides that it's a full-employment program for asymmetric cryptography researchers --- is the idea that we need constructions today that will remain resilient 20-30 years from now.