lily

AI just proved that the Exponential Time Hypothesis (ETH) is false. Cryptography relies on ETH, but luckily this particular discovery doesn't threaten core algorithms yet. However, ETH was thought true for almost 30 years, and is highly relevant in the field. This illustrates how AI is the true threat to crypto and security, because it can move the ground under our feet, and it's here today. Currently, many chains are promoting their migration to "quantum safe" signatures and other schemes. Meanwhile, cryptographically-relevant quantum computers won't be around for some years, and even when they are, they'll be specialized machines, requiring special environments, rather than easily accessible mass market devices, and it will be relatively easy for authorities and regulatory frameworks to control their use, at least initially. Renting them for the purposes of hacking won't be allowed, for obvious reasons (not that this is something we should rely upon, but it impacts any objective threat analysis). However, there are dangers with adopting these schemes. The less well-studied and more complex a cryptography algorithm, the greater the chance that a sudden shift in our understanding of theoretical computer science or mathematics, or sophisticated analysis by AI, will suddenly reveal a catastrophic bug. The first real-world harbinger of the dangers occurred when AI found issues with HAWK, a quantum-safe algorithm that was passing through NIST's standardization process at the time (it was withdrawn). Chain operators' desire to ride narratives and exploit the tendency of web3 investors tendency to seize onto this or that carefully promoted story, who for the most part do not use crypto technology beyond holding and trading tokens, and who lack understanding of the theoretical issues involved, is certainly exploitative for a simple reason — whereas historical technical safety manias used for commercial purposes, such as Y2K, only collected money, this one also risks user safety. Chains sell adoption of quantum safe signature schemes to token buyers and users that in reality reflect a kind of stupidity, and irresponsibility, rather than actions reflecting wise stewardship protecting people from an imminent quantum meltdown. Meanwhile, of course, while adding support for a new post quantum signature algorithms doesn't involve much engineering work, it allows them to post pictures of their logo next to photos of quantum computers, so they can sell the ignorant on how sci-fi and advanced they are, which makes it particularly attractive to them. Important note: you'll hear about some serious people performing post quantum encryption of messages. That's different. They're calculating the risk that adversaries, such as state adversaries, perform mass storage of encrypted messages containing secrets, so that they can extract the secrets from them 10 years from now, say, when they finally have cryptographically-relevant quantum computers. This is a different kind of risk they are addressing. The perverse tragedy of the quantum mania craze that's currently gripping crypto is that on the one hand it shows how so many chains are driven by a desire to sell tokens first, rather than pursue sound engineering practices, and on the other, their willingness to lie and risk user safety in the process. This, all while the real wolf is at the door as concerns our engineering — AI that's rapidly advancing, here today, accessible to many, and difficult to control. What I can promise, is that DFINITY will be focusing on mitigating this real risk, and no matter the post quantum mania, we won't be joining it, and will instead try to plot the most responsible course. sansser.com/articles/exponen…