Addressing post-quantum cryptography with CodeQL(github.blog)

13 pointsby todsacerdoti3 yıl önce3 comments

Addressing post-quantum cryptography with CodeQL

https://github.blog/2023-12-05-addressing-post-quantum-cryptography-with-codeql/

3 comments

[deleted]3 yıl önce

kageiit3 yıl önce

I setup codeql locally to do some simple taint analysis recently. I found the tooling very powerful but quite complex to use. Updating the codeql database after making code changes was quite slow as well which made it harder to do incremental analysis.Can't imagine the complexities involved with quantum computing code analysis.

sidcool3 yıl önce

The article makes it seem like large scale quantum computing is around the corner. If so, military likely already has it even if in a primitive form.

tptacek3 yıl önce

I'm no expert but I do pay attention and I don't know of anyone working in this space that believes it's right around the corner. What's motivating a lot of PQC work --- besides that it's a full-employment program for asymmetric cryptography researchers --- is the idea that we need constructions today that will remain resilient 20-30 years from now.