logoalt Hacker News

littlestymaaryesterday at 1:07 PM0 repliesview on HN

> when ECDH is nearly guaranteed to be broken in five years

Says who?

There's a big difference between “we can't be sure that ECDH stays secure for five more years” and “ECDH is nearly guaranteed to be broken”. There has been two major papers in the beginning of the year that advanced the state of the art enough to question the prior assumption about the slowness of QC progress. Now we know that rapid advances are possible and we must take that into account in risk assessment. But that doesn't mean that rapid advances are guaranteed. Things could stay stagnant for 15 more years at this point before the next breakthrough. And if that's the case, then ECDH could very well remain relevant for the remaining century.

We just cannot know if it happens, so we can't take the risk. But that doesn't mean that we are certain that the risk will materialize.