# Quantum Resistance **URL:** \ **Category:** Development and Technical Discussion\ **Created:** [February 18, 2018, 2:46pm UTC](https://forum.grin.mw/t/quantum-resistance/194 "2018-02-18T14:46:08Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![harry.potter](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/harry.potter/32/99_2.png) [@harry.potter](https://forum.grin.mw/u/harry.potter)\ **Post date:** [February 18, 2018, 2:46pm UTC](https://forum.grin.mw/t/quantum-resistance/194/1 "2018-02-18T14:46:08Z")
This guy believes its possible to make grin quantum resistant Skip to 29 mins ---
**Author:** ![0xb100d](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/0xb100d/32/364_2.png) [@0xb100d](https://forum.grin.mw/u/0xb100d)\ **Post date:** [February 18, 2018, 9:50pm UTC](https://forum.grin.mw/t/quantum-resistance/194/2 "2018-02-18T21:50:14Z")
sounds like mystical mumbo jumbo. ---
**Author:** ![igno.peverell](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/igno.peverell/32/4_2.png) [@igno.peverell](https://forum.grin.mw/u/igno.peverell)\ **Post date:** [February 19, 2018, 11:02pm UTC](https://forum.grin.mw/t/quantum-resistance/194/3 "2018-02-19T23:02:41Z")
Quantum resistant cryptographic primitives are still a very early and active area of research. We have included some protections we can soft fork in case of a completely unexpected breakthrough. But quantum resistance is still a field in cryptography that needs to be fleshed out before it can be leveraged by any public system. Otherwise you risk replacing a secure system with a new unsecure one for fear of the bogeyman. ---
**Author:** ![0xb100d](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/0xb100d/32/364_2.png) [@0xb100d](https://forum.grin.mw/u/0xb100d)\ **Post date:** [July 23, 2019, 2:28am UTC](https://forum.grin.mw/t/quantum-resistance/194/4 "2019-07-23T02:28:10Z")
Not sure how legit this is: > **[How a quantum computer could break 2048-bit RSA encryption in 8 hours](https://www.technologyreview.com/s/613596/how-a-quantum-computer-could-break-2048-bit-rsa-encryption-in-8-hours/)** > > A new study shows that quantum technology will catch up with today’s encryption standards much sooner than expected. That should worry anybody who needs to store data securely for 25 years or so. ---
**Author:** ![blackbox](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@blackbox](https://forum.grin.mw/u/blackbox)\ **Post date:** [July 23, 2019, 4:56am UTC](https://forum.grin.mw/t/quantum-resistance/194/5 "2019-07-23T04:56:55Z")
Hash based signatures offer a better alternative in terms of quantum resistance, but it comes with the overhead of the size of signature (ie. Lamport Signatures). Could ZK-SNARKS, Mimble Wimble, or similar cryptographic protocols offer a way to compress these quantum resistant signatures and maintain its security or would the security still fall back on the underlying ZK-SNARK / MW security assumptions? 🤔 Or is my question fundamentally flawed? ---
**Author:** ![tromp](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/tromp/32/22_2.png) [@tromp](https://forum.grin.mw/u/tromp)\ **Post date:** [July 23, 2019, 6:38am UTC](https://forum.grin.mw/t/quantum-resistance/194/6 "2019-07-23T06:38:39Z")
MW relies on algebraic properties of its underlying crypto to achieve cut-through, which appears to be fundamentally incompatible with hash-based signatures that provide no such algebraic properties… ---
**Author:** ![blackbox](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@blackbox](https://forum.grin.mw/u/blackbox)\ **Post date:** [July 24, 2019, 1:33am UTC](https://forum.grin.mw/t/quantum-resistance/194/7 "2019-07-24T01:33:28Z")
Thanks @tromp, Im trying to understand ZK & bulletproofs…not exactly easy. So from what I’ve read so far MW uses switch commitments for quantum resistance. The everlastingly binding property of them sounds very interesting. How can we know the current capabilities of a quantum computer at any time? If a malicious actor built one strong enough to completely break asymmetric encryption, we wouldn’t know until it’s too late. They would just compute keys of interest, one by one. People would still assume they got hacked or leaked the key somehow. Public blockchains could give us visibility on this…but only if we can recognize it. ---
**Author:** ![tromp](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/tromp/32/22_2.png) [@tromp](https://forum.grin.mw/u/tromp)\ **Post date:** [July 24, 2019, 6:41am UTC](https://forum.grin.mw/t/quantum-resistance/194/8 "2019-07-24T06:41:10Z")
> [@blackbox](#): > > If a malicious actor built one strong enough to completely break asymmetric encryption It’s exceedingly unlikely that a malicious actor can advance the field of quantum computers much faster than the well funded public groups at Google, IBM, Microsoft, Rigetti, etc, that are currently pushing the boundaries. ---
**Author:** ![monkyyy](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/monkyyy/32/1590_2.png) [@monkyyy](https://forum.grin.mw/u/monkyyy)\ **Post date:** [July 24, 2019, 7:32am UTC](https://forum.grin.mw/t/quantum-resistance/194/9 "2019-07-24T07:32:08Z")
The cia? Its only merely unlikely ---
**Author:** ![blackbox](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@blackbox](https://forum.grin.mw/u/blackbox)\ **Post date:** [July 25, 2019, 2:50am UTC](https://forum.grin.mw/t/quantum-resistance/194/10 "2019-07-25T02:50:18Z")
Im playing devils advocate here, not trying to stir the pot. I know creating a quantum computer is next-level. But who’s to say that we won’t find more efficient ways of producing & using quantum circuits and/or integrating them in ways to do computations we’ve never thought of before? Quantum physics has a knack for flipping our views of reality upside down. ---
**Author:** ![monkyyy](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/monkyyy/32/1590_2.png) [@monkyyy](https://forum.grin.mw/u/monkyyy)\ **Post date:** [July 25, 2019, 3:26am UTC](https://forum.grin.mw/t/quantum-resistance/194/11 "2019-07-25T03:26:47Z")
I’m offended your not insulting anyone. There is lots of talk about the error rate scaling poorly, given that large scale quantum situations dont yet exist there may be a reason the error rate grows. It’s not like spooky action at a distance is the cleanest thoery, it just happens to be the best math. ---
**Author:** ![blackbox](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@blackbox](https://forum.grin.mw/u/blackbox)\ **Post date:** [July 25, 2019, 3:31am UTC](https://forum.grin.mw/t/quantum-resistance/194/12 "2019-07-25T03:31:25Z")
Could you enlighten me on the subject of the “quantum error rate”? I had heard and read very little about quantum error correcting codes…maybe I am thinking that at a certain scale, or amount of time, the probability of a calculation being inaccurate is about the same as a photon being interrupted by noise in the process? ---
**Author:** ![monkyyy](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/monkyyy/32/1590_2.png) [@monkyyy](https://forum.grin.mw/u/monkyyy)\ **Post date:** [July 25, 2019, 4:16am UTC](https://forum.grin.mw/t/quantum-resistance/194/13 "2019-07-25T04:16:32Z")
Nothing to do with computer science, math and physics ppl have been saying that has the numbers of qbits increase the error rate of the machines also increases. ---
**Author:** ![monkyyy](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/monkyyy/32/1590_2.png) [@monkyyy](https://forum.grin.mw/u/monkyyy)\ **Post date:** [July 25, 2019, 6:53am UTC](https://forum.grin.mw/t/quantum-resistance/194/14 "2019-07-25T06:53:38Z")
Since its on my mind and presumably people here are knowledgeable, I believe that the most likely outcome is that the quantum dream will prove to be false but that quantum supremacy will be achieved for specific np-complete problems with a “ln” improvement as another “jank” computer system. “gil kalais” and friends argument is roughly that quantum systems are probably exponentially unstable thru size and time, which sure sounds correct to me; he talks way to much to say it, but proably, if the mechanism for spooky action at a distance is a “message” between two particals rather then the whole system itself fully connected graphs grow exponentially, 1 node is zero, 2 is 1, 3 is 3 etc. gamma rays, strings, blah blah, whatever. So every mirco second its going thru gates these “edges” may be hit by whatever causes random collapses. But this doesn’t break all quantum machines, imagine a “tree” of programmable entanglement gates with a single “quantum instruction” at the end. Since the N quantum state would only exist for a mirco second, 2X N/2 exist for 2 mirco seconds, 4x N/4 3 mirco seconds, etc. this should be generating n ln n ish errors and this would be solving a version of sat, at extreme cost; and since the math people play it fast and loose with building that np-compete tree, converting that into solving real probably likely would be still extremely expensive. I.e. people can say brainfuck is turing complete, but it takes n\*n time to compute multiplication when a normal computer does it in one specialized instruction; jank has a cost, its useful as all fuck, but that cost in complexity is always there, converting in and out of a special version of sat and that tree for sat to more general np-complete problems will likely follow such a pattern. Long term storage means the quantum state is existing for longer the 1 micro second and is therefore a bad idea as is error correction with larger quantum states or “non-deterministic computations”(i.e. ones that read super positions, rather then “rotating” a super position to a normal position) that would add to the error rates even more. Any one want to offer corrections?; that roughly my take on whats possible with the future of quantum. ---
**Author:** ![tromp](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/tromp/32/22_2.png) [@tromp](https://forum.grin.mw/u/tromp)\ **Post date:** [July 25, 2019, 7:16am UTC](https://forum.grin.mw/t/quantum-resistance/194/15 "2019-07-25T07:16:55Z")
> [@monkyyy](#): > > achieved for specific np-complete problems The problems that quantum computers can “crack” (solve exponentially faster than what we think classical computers can do) are not np-complete problems. In particular, Integer factoring and discrete log problems are not np-complete. ---
**Author:** ![monkyyy](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/monkyyy/32/1590_2.png) [@monkyyy](https://forum.grin.mw/u/monkyyy)\ **Post date:** [July 25, 2019, 8:20am UTC](https://forum.grin.mw/t/quantum-resistance/194/16 "2019-07-25T08:20:17Z")
I disagree with the quantum dream based on error correction working out; I’m aware of the standard conclusion, but its going to be built on axioms I disagree with. So I don’t care about the stated conclusions as a rule. Shor’s algorithms use direct collapsing of quantum state not rotation. I know its got everyone all excited but more skeptical, it adds error to the system and hopes to fix its mistakes later. Maybe adding error to unstable systems is not the best idea in the world. It seems to me there must be something happening under the hood of quantum, the field doesn’t have a real product so they don’t yet know what they are talking about and controlled collapsing super positions may not be possible at scale. The only “supremacy” existing is the “Deutsch–Jozsa algorithm” in that it literally exists, while shor hasn’t really, so the pessimistic view is that the hype around shor is misguided and the paradigm should be around quantum circuits and building on a foundation of the hard the spell and pronounce one. ---
**Author:** ![FirsArgentum](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/firsargentum/32/736_2.png) [@FirsArgentum](https://forum.grin.mw/u/FirsArgentum)\ **Post date:** [July 25, 2019, 9:20am UTC](https://forum.grin.mw/t/quantum-resistance/194/17 "2019-07-25T09:20:53Z")
Adiabatic quantum computation may provide the answer. ---
**Author:** ![blackbox](https://avatars.discourse-cdn.com/v4/letter/b/c2a13f/32.png) [@blackbox](https://forum.grin.mw/u/blackbox)\ **Post date:** [July 25, 2019, 9:55am UTC](https://forum.grin.mw/t/quantum-resistance/194/18 "2019-07-25T09:55:44Z")
"Deutsch–Jozsa algorithm”…black box quantum computer…now we’re talkin haha. > [@monkyyy](#): > > It seems to me there must be something happening under the hood of quantum, the field doesn’t have a real product I kind of agree, I think there is a brick wall we are all hitting here. There is definitely a set of problems and calculations we can expect to do well if we can set up a quantum system correctly. But that is the thing, there is no universal quantum “lab” we can set up to do any type of calculation more efficiently than a classical system. If you want to solve a specific problem classical cant solve more quickly, you must have a specific setup which is pointed to the exact problem at hand. If you want to factor integers quickly, you must set up a specific quantum system, and this is in contrast to the classical computers that we all use which can solve many arbitrary calculations at our imaginations’ expense. ---
**Author:** ![septimavector](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.grin.mw/septimavector/32/2290_2.png) [@septimavector](https://forum.grin.mw/u/septimavector)\ **Post date:** [November 4, 2019, 9:25am UTC](https://forum.grin.mw/t/quantum-resistance/194/19 "2019-11-04T09:25:42Z")
Two lattice-based commitment schemes as possible Pedersen replacement. Carsten Baum, Ivan DamgĂĄrd, Sabine Oechsner, Chris Peikert: Efficient Commitments and Zero-Knowledge Protocols from Ring-SIS with Applications to Lattice-based Threshold Cryptosystems Akinori Kawachi, Keisuke Tanaka, Keita Xagawa: Concurrently Secure Identification Schemes Based on the Worst-Case Hardness of Lattice Problems. ---
**Author:** ![phyro](https://avatars.discourse-cdn.com/v4/letter/p/54ee81/32.png) [@phyro](https://forum.grin.mw/u/phyro)\ **Post date:** [November 17, 2019, 1:30pm UTC](https://forum.grin.mw/t/quantum-resistance/194/20 "2019-11-17T13:30:50Z")
@septimavector do you know if there’s anything else apart from quantum resistance that could be gained by switching the commitment scheme? [Next page](https://forum.grin.mw/t/quantum-resistance/194.md?page=2)