Score:0

Are there any full alternatives to RSA that are quantum-resistant

so flag

By full alternatives I mean things that can do everything RSA can, namely establish secure security without privately sharing information prior. Something which AES can't do.

In other words, I'm looking for quantum-resistant asymmetric encryption.

fgrieu avatar
ng flag
Beside asymmetric encryption, a "full alternative" for RSA must do [digital signature](https://en.wikipedia.org/wiki/Digital_signature), which nowadays is the main use of RSA, and does not follow from asymmetric encryption. I have removed the "quantum cryptography" tag since the question is about classical cryptography that resist quantum computers, not using quantum mechanisms to perform cryptography, as in Quantum Key Distribution.
Score:5
si flag

NIST is currently running a post-quantum cryptography contest for this.

Note that they won't standardize one algorithm, but will split Key Encapsulation Mechanisms (KEMs) which exchange symmetric Authenticated Encryption with Associated Data (AEAD) keys out from signature algorithms. RSA uses the same algorithm for both, which allows users to make some catastrophic mistakes by re-using keys for different purposes.

The resulting process to securely send messages will need some way to bind public keys to identities (e.g. the TLS PKI will likely be updated to allow these scheme's keys in certificates). Then key exchange will proceed essentially as normal, just with a KEM to exchange an AEAD key and post-quantum signature to verify identity instead of (or in addition to) RSA or DH or ECDH to exchange an AEAD key and a pre-quantum signature to verify identity.

Score:0
US flag
user104975

There are many. A few examples are are the Merkle signature scheme and Crystals-Kyber.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.