From 2b6e1d99d550d35c8bfbacbd3f06e24ae726a124 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Filip=20Tron=C3=AD=C4=8Dek?= Date: Sat, 30 Sep 2023 19:58:50 +0000 Subject: [PATCH] upp --- _posts/2023-10-01-hello-internet.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/_posts/2023-10-01-hello-internet.md b/_posts/2023-10-01-hello-internet.md index 7b95892..a33fa21 100644 --- a/_posts/2023-10-01-hello-internet.md +++ b/_posts/2023-10-01-hello-internet.md @@ -3,11 +3,11 @@ title: “Unveiling the Early Adopters of ECH and Kyber” image: “ciphertrail-chronicles.jpg" --- -As we are already pretty used to, the web gets more secure every single day. This time around, we are talking about two new emerging standards: Kyber-based hybrid post-quantum key exchange and ECH. Both of these are currently "Active Internet-Draft"s, but they have already begun to roll out to major sites, at least one of them. +As we're already accustomed to, the web becomes more secure every single day. This time around, we're discussing two emerging standards: Kyber-based hybrid post-quantum key exchange and ECH. Both are currently "Active Internet-Draft"s, yet they've already begun to roll out on major sites, at least one of them. Let's start with Kyber. Now that we have quantum computers and their qubits are [ever-increasing](https://www.ibm.com/quantum/roadmap), we need to start thinking about protecting our quantum-vulnerable encryption algorithms against them. Fortunately, this neither means that your data is at risk now or that we need to replace all cryptography at use today. The algorithms vulnerable to quantum computers implementing Shor's algorithm are the ones used for key exchange, the part of an encrypted communication responsible for setting up a shared key. The biggest ones we're aiming to replace are DH, ECDH, and RSA. -NIST is on track to standardize the Lattice-based CRYSTALS-Kyber algorithm as a replacement to the aforementioned vulnerable ones by 2024. Some clever engineers have already begun with real-world implementations: Signal [recently announced](https://signal.org/blog/pqxdh/) their spin on the soon-to-be standard, Post-Quantum Extended Diffie-Hellman or PQXDH for short. The update to the Signal protocol features a hybrid[^1] between the KEM in use today, X25519 (ECDH), **and** CRYSTALS-Kyber for a simple reason: it is not a good idea to trust the latest standards when it comes to encryption — they're often broken[^2], but never on day 1. This a very similar approach to the one the latest post-quantum hybrid key agreement algorithms for TLS take: both X25519Kyber512Draft00 and X25519Kyber768Draft00 feature the same algorithms (X25519 + Kyber), which major players including Google and Cloudflare have been beta testing for over a year now. [[1](https://blog.cloudflare.com/post-quantum-for-all/)] +NIST is on track to standardize the Lattice-based CRYSTALS-Kyber algorithm as a successor to the aforementioned vulnerable ones by 2024. Some very clever engineers have already embarked on real-world implementations: Signal [recently unveiled](https://signal.org/blog/pqxdh/) their take on the impending standard: Post-Quantum Extended Diffie-Hellman or PQXDH for short. The Signal protocol update features a hybrid[^1] blend of the current KEM, X25519 (ECDH), **and** CRYSTALS-Kyber, for a simple reason: new encryption standards, are often broken[^2], but rarely on day one. This approach mirrors the trajectory of the latest post-quantum hybrid key agreement algorithms for TLS: X25519Kyber512Draft00 and X25519Kyber768Draft00, both encapsulating X25519 + Kyber. They have been under beta testing by tech giants like Google and Cloudflare for over a year now. [[1](https://blog.cloudflare.com/post-quantum-for-all/)] This means that most sites proxied through Cloudflare already support Kyber512 and Kyber768 key agreements. The list also includes Google-owned sites like YouTube and Google Drive, but to find Amazon or Microsoft's sites, you'd have to look elsewhere. Adoption is rolling out slowly but surely, but the bigger issue here are the clients: only the latest of Chrome supports it[^3], with other clients like `curl` and most programming language's network APIs still lacking any progress — most likely, we will have to wait until finalization of the [proposal](https://www.ietf.org/archive/id/draft-westerbaan-cfrg-hpke-xyber768d00-00.html) for further adoption. @@ -21,7 +21,7 @@ To summarize, ECH is a great feature for improving online privacy for many, the Personally, I hold ECH as a massive improvement to the overall digital landscape and would encourage anyone on Cloudflare to [flip the switch](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates). For other providers, I'd wait until ECH becomes easily available for you. -I would love to make a blog post series out of this concept of web security, I named it “CipherTrail Chronicles” and hope I to see you on episode 2. To close off the post on something informative, here is an overview of some notable domains and their support status (as of September 2023)[^5]: +I would love to make a blog post series out of this concept of web security: I named it "CipherTrail Chronicles" and hope to see you on episode 2. To close off the post on an informative note, here is an overview of some notable domains and their support status (as of September 2023)[^5]: | Domain | Protocol | Key exchange | ECH support | Cloudflare? | | ------------------ | -------- | --------------------- | ----------- | ----------- | -- 2.51.2