V1a: Post-quantum cryptography (Kyber and Dilithium short course)

[@cryptography101-alfred]

The lecture slides are available at the course web page: cryptography101.ca/kyber-dilithium/ Typo in slide 16: "SP 800-28" should be "SP 800-208".

[@아뭄무]

Thank you for making such a good lecture. It helped me a lot.

[@cryptography101-alfred]

I'm glad that you found the lecture useful!

[@anmoladarsh8928]

sir can you please explain how will the cyber security risk reduces for the organization switching to pqc new standards

[@cryptography101-alfred]

Switching to the new PQC standards provides resistance against "harvest now, decrypt later" attacks by quantum computers (which RSA and ECC definitely do not provide). However, there are some caveats. 1) It's not clear when cryptographically relevant quantum computers will be built, so switching to PQC schemes might not be worth the cost. 2) The PQC standards are relatively new, so there is always the possibility that classical and quantum attacks will be discovered on the new schemes. This suggests using "hybrid" modes, where a new PQC scheme is used together with a traditional ECC scheme; however, this increase implementation complexity. 3) Implementing the new schemes will be challenging, which increases the risk of side-channel attacks and security vulnerabilities due to poor implementations.