March 2022
Watch out for more on Quantum resistance
21/03/22 15:23 Filed in: Quantum resistance | Encryption
If you have not heard the term 'Quantum Resistance' mentioned already, you will begin to do so in the coming months. Quantum Resistance is the ability of cryptographic algorithms to withstand a decryption attack using quantum computing power.
At present, most algorithms used in applications that use cryptography, such as blockchain or public/private key solutions have relied on the premise that current computing power is limited to the extent that it would take decades or longer to decrypt the encrypted payload, by which time the payload would have no value.
We are now seeing the emergence of affordable quantum computers which, if applied to attacking encrypted payloads should be able to decrypt them in days, possibly hours or less. The old paradigm has been broken.
Some organisations and state actors have been harvesting and storing encrypted traffic for years, so that they can read it at some future time, when quantum computing power is affordable and decryption times are very short. They do this because it may provide insights into and individual's or organisation's characteristics or decision making that were hidden before.
In recognition of the challenges to traditional encryption solutions posed by quantum computing, significant effort has been expended to produce quantum resistant algorithms.
One such milestone was achieved in March 2022 following trials which started in March 2021. NATO's Cyber Security Centre (NCSC) reported in March 2022 that they had successfully completed trials of algorithms that can successfully withstand quantum computer based decryption attacks.
I expect we will see commercial grade applications in the next year or so
At present, most algorithms used in applications that use cryptography, such as blockchain or public/private key solutions have relied on the premise that current computing power is limited to the extent that it would take decades or longer to decrypt the encrypted payload, by which time the payload would have no value.
We are now seeing the emergence of affordable quantum computers which, if applied to attacking encrypted payloads should be able to decrypt them in days, possibly hours or less. The old paradigm has been broken.
Some organisations and state actors have been harvesting and storing encrypted traffic for years, so that they can read it at some future time, when quantum computing power is affordable and decryption times are very short. They do this because it may provide insights into and individual's or organisation's characteristics or decision making that were hidden before.
In recognition of the challenges to traditional encryption solutions posed by quantum computing, significant effort has been expended to produce quantum resistant algorithms.
One such milestone was achieved in March 2022 following trials which started in March 2021. NATO's Cyber Security Centre (NCSC) reported in March 2022 that they had successfully completed trials of algorithms that can successfully withstand quantum computer based decryption attacks.
I expect we will see commercial grade applications in the next year or so
Web 3 - how much is hype?
13/03/22 15:44 Filed in: Web3
Web 3 is receiving a lot of press coverage at the moment. Its advocates are promising an open, devolved web where users are in control of their own data and where everything is secured on a blockchain.
The evolution of the web and its further evolution to Web 3 can be summarised thus:
Web 1.0 comprised limited bandwidth connectivity, more desktop than mobile devices, static web pages, emerging search capabilities and users who had to make an effort to find and then consume content.
Web 2.0 is the world wide web we have today. It is based upon the concept of the web as a platform, now focused on mobile and desktop user devices, widely available high bandwidth connectivity, with large amounts of user created dynamic content (social media is one example), quick and easy search capabilities, and with supporting services making content easy to publish (on some platforms only).
It is a client server model that gives a very rich user experience. However, it is mainly the large tech giants who own the platforms and the global hosting capabilities who can monetise the users’ use of their platforms and services.
Web 3.0 is the proposed next iteration of the world wide web, based upon blockchain (distributed ledger technology – DLT), the equivalent of the enabling TCP and IP networking protocols, with applications and services sitting upon it.
There are a many key issues to be resolved, not least those of Governance, the development of 'globally accepted standards', subsequent choices of technologies and lastly the vendors and their products that will form the new Web 3.0 infrastructure and services.
We are at the start of the journey with many years ahead before Web 3.0 becomes as ubiquitous as today's public internet and the world wide web. If you are interested in Web 3.0 we have published a White Paper which is available on request.
The evolution of the web and its further evolution to Web 3 can be summarised thus:
Web 1.0 comprised limited bandwidth connectivity, more desktop than mobile devices, static web pages, emerging search capabilities and users who had to make an effort to find and then consume content.
Web 2.0 is the world wide web we have today. It is based upon the concept of the web as a platform, now focused on mobile and desktop user devices, widely available high bandwidth connectivity, with large amounts of user created dynamic content (social media is one example), quick and easy search capabilities, and with supporting services making content easy to publish (on some platforms only).
It is a client server model that gives a very rich user experience. However, it is mainly the large tech giants who own the platforms and the global hosting capabilities who can monetise the users’ use of their platforms and services.
Web 3.0 is the proposed next iteration of the world wide web, based upon blockchain (distributed ledger technology – DLT), the equivalent of the enabling TCP and IP networking protocols, with applications and services sitting upon it.
There are a many key issues to be resolved, not least those of Governance, the development of 'globally accepted standards', subsequent choices of technologies and lastly the vendors and their products that will form the new Web 3.0 infrastructure and services.
We are at the start of the journey with many years ahead before Web 3.0 becomes as ubiquitous as today's public internet and the world wide web. If you are interested in Web 3.0 we have published a White Paper which is available on request.