Am I correct in thinking that post-quantum cryptography such as lattice-based solutions run on classical computers are resistant to quantum attacks (as opposed to RMS), whereas quantum key distribution schemes such as the BB84 are designed to run on quantum computers to communicate between them?
$\begingroup$
$\endgroup$
2
-
2$\begingroup$ "Am I correct"-type questions are not well suited for here. I mean, what would be an answer: "Yes"? $\endgroup$– Norbert SchuchOct 7, 2018 at 14:29
-
$\begingroup$ Short answer: 1. Yes, you are right. 2. You don't need a full QC to run BB84, just some quantum device (which, I guess, is what you mean). $\endgroup$– Norbert SchuchOct 7, 2018 at 14:29
Add a comment
|
1 Answer
$\begingroup$
$\endgroup$
1
Post-quantum crypto schemes run on classical computers and are hoped to be secure against quantum attacks. Quantum key distribution such as bb84 or e91 run on quantum hardware (although does not require the full power of a quantum computer) and is provably secure (subject to certain underlying assumptions about lab security etc) against quantum attack.
answered Oct 8, 2018 at 5:42
-
$\begingroup$ It is important to note that all QKD algorithms involve a significant classical components for authentication, information reconciliation, and privacy enhancement. While these may be provably resistant against quantum attack they are quite complex. Hence there may be vulnarabilities in specific implementations. $\endgroup$ Dec 15, 2019 at 16:41