Post-Quantum Cryptography for Dummies
Jeremy Rasmussen
BSides Tampa 2020

Abstract:
Quantum computing allows complex problems to be solved exponentially quicker than what is currently available with classical computing. For several years now, we have been warned that a quantum computing breakthrough is just around the corner. Now, with Google's recent "quantum supremacy" announcement, researchers have shown that it's possible to solve a complex mathematical calculation in about 3 minutes for which a supercomputer would take 10,000 years. So, are we on the verge of a Y2K-like event involving quantum computers breaking all of our popular public-key cryptographic systems, such as RSA, which form the basis of many of our authentication, key exchange/distribution, VPN, and even blockchain systems? Mathematicians and computer scientists are on the clock now to do the following: - Quickly improve the efficiency of post-quantum cryptography. Build confidence and consensus in the methods of post-quantum cryptography. Improve the usability of post-quantum cryptography in widely-deployed crypto systems. In this talk, we'll review basic concepts of cryptography, complexity theory, and quantum computing. We'll then delve into the next generation of cryptographic algorithms that appear to have attributes resisting quantum-computing attacks. Such algorithms include hash-based cryptography, code-based cryptography, lattice-based cryptography, and multivariate cryptography. My intent is to put these in laypeople's terms as much as possible. Finally, we will discuss practical application of these concepts in the next generation of crypto systems. This talk will not address quantum cryptography, which is a different subject altogether.

Bio:
Jeremy Rasmussen is CTO/CISO of Abacode, a company that provides managed cybersecurity & compliance advisory services to businesses across all industries. He is also an adjunct professor at the University of South Florida and founder of the USF Whitehatters Computer Security Club (WCSC). Since 2000, he has taught courses in cryptography & network security, ethical hacking, digital forensics & investigations, and mobile & wireless security. For 25+ years, he has performed R&D of cyber solutions for government and commercial customers. Jeremy is a CISSP (No. 11762) and CEH. He was named 2017 Tampa Bay Technology Leader of the Year.

Back to BSides Tampa 2020 video list