More generally anything based on the discrete logarithm problem (so both rsa and ecc) are not quantum resistance.
As explained to me by an actual maths guy the basic issue is that DLP is heavily biased across its key space. Shor’s algorithm leverages this by doing a Fourier transform that gets the incorrect values to cancel out. The quantum resistant algorithms work by creating an unbiased key space so there’s no ability to cancel out the incorrect answers without also cancelling out the correct ones. In theory anyway. The mailing list seems to consist mostly of people posting flaws in their own systems and/or each other’s.
I'll be honest, my knee-jerk reaction was "BlackBerry is still in business?". Anyone on HN own one or know of someone who does? I can't recall the last time I walked into a store who actually carried BB products on their shelves.
I own a KeyOne, released last year with Android instead of BB's own OS. I love it, only downside is that I had to import it as it isn't available in my country ... I'd mainly used Samsung flagship phones before and got really tired of all the bloatware as well as typing on a touchscreen. (Can't believe more people are questioning touchscreen typing on phones, I think it's horrible and I don't have the largest set of fingers in the world.)
I bought it for roughly $500 and this is what I make of it after one year of using it:
The camera on my KeyOne is superior to anything I've tried before, I'd even go as far as saying that it's up there and competing with the giants. The Sony Z2 Compact camera is a potato in comparison. The keyboard feels a bit cheap and some keys make a squeeking noise, but it's still better than touchscreen typing by far. I've dropped the phone on a number of occassions, it hasn't broken once. The backside tend to pop out, but it's easy to put it back in place again. My biggest complain about the hardware would be the screen, as I haven't access to any protective accessories my screen is pretty scratched by now. It doesn't affect what's displayed on the screen (yet) however, but yeah, I think it scratch too easily. Like I said, the OS is Android, and it's been fairly problem free for being Android. However, lately it has been a bit too agressive in shutting down apps in the background. But I don't know if that is BB's own build's fault or Android in general. There are some pre-installed "security" apps which gives the feeling of the phone being more secure than your other average Android phone. I don't use them though.
My over all impression of the KeyOne is 8 out of 10 I'd say, and I think I'll keep it until it literally fall apart.
I also have a KEYone, got it a few months ago. When I was looking to upgrade and saw it on my provider's site I was like, "holy crap, Android with a hardware keyboard finally exists?"
Really, I didn't even care that it was Blackberry, I've been getting so tired of the software keyboards that I couldn't even consider the others once I saw it. And for me, it was definitely worth it. Now I can actually touch-type again without having to pause between words to check I didn't mis-type anything - I can feel it, just like missing a key on a regular keyboard.
I just upgraded from a KeyOne to a Key2 and it's better in just about every way. Twice the storage and RAM, faster CPU, dual camera, more spacious keyboard, cleaner design, more solid construction, and the fingerprint sensor is faster and works better with sweaty fingers (i.e. while running/exercising) than my work-issued iPhone 7.
People are seeing on touchscreen phones, which is faster than typing. I can't believe you're surprised people aren't using BlackBerries! Once paying for texts stopped being relevant teenage girls moved onto smartphones and that was the of BlackBerry.
BlackBerry is not only still in business, but they are profitable too. [1]
Their handset business is almost completely wiped out. The catch is that they're making their money off enterprise software and services. They also still have their QNX business, but maintaining their lead in the automotive sector will be challenging. It remains to be seen how long their strategy will work.
My spouse has a Blackberry and when it wears out he plans on replacing it with another Blackberry. Why? I dunno, something about it being Canadian and not from Apple.
I too have a Blackberry(Passport) for three years now, and if it breaks I'm planning on getting another one.
The reason is simple: The OS is amazing and still ahead of all competitors in aspects that are important to me, it does everything I need well enough and I love the device's and screen's dimensions.
Honestly it made me lose all interest in any other phone.
Me too. I've had mine for ~4 years and it's going strong. Blackberry OS 10 is really nice, and I prefer it to Android and IOS. They seemed to 'get' what a mobile OS should be (i.e. a helper not something that takes over your life). Then again, it is frozen in time 4 years ago.
In the past I have had to install a root CA (for AWS or LE, I forget which), I have to use FTP to get my pictures off, but the trade-off is worth it in my book.
I always get an amazing amount of push-back (from astonishment to outright "you're wrong") from people who argue that no-one should ever want anything except what Apple and Google want to push. Well, some people do!
> The solution, which will be available next month, is actually the product of a partnership between BlackBerry and Isara Corporation, a company whose mission is to build quantum-safe security solutions. BlackBerry is using Isara’s cryptographic libraries to help sign and protect code as security evolves.
Okay, so the article is specifically talking about digital signatures, so they're almost certainly implementing qTESLA (or a Blackberry-specific variant thereof), which is a lattice-based signature algorithm.
If this does turn out that they're implementing qTESLA (which is committed to the public domain), the headline "races ahead of security surve" will prove to be needlessly sensationalist.
Last time I read about quantum resistant crypto was regarding the NSA's call for papers. As I recall many of the used cryptosystems were broken by conventional computing within like a month.
My point being, what reason do we have to believe these are safe cryptosystems.
The Blackberry founder Mike Lazaridis is a physicist and huge proponent of quantum computing, he funded among other things the "quantum valley" in Canada.
Quantum sounds cool but what big potential application can people point to other than crypto?
And if quantum resistant crypto is in place by the time serious quantum computing is in place, I assume the main application of quantum will be to read all stored, previously encrypted secrets out there.
36 comments
[ 2.7 ms ] story [ 54.4 ms ] threadIt looks like the story is more complicated (and most ECC algorithms are not quantum resistant): https://crypto.stackexchange.com/questions/35482/which-ellip...
As explained to me by an actual maths guy the basic issue is that DLP is heavily biased across its key space. Shor’s algorithm leverages this by doing a Fourier transform that gets the incorrect values to cancel out. The quantum resistant algorithms work by creating an unbiased key space so there’s no ability to cancel out the incorrect answers without also cancelling out the correct ones. In theory anyway. The mailing list seems to consist mostly of people posting flaws in their own systems and/or each other’s.
The camera on my KeyOne is superior to anything I've tried before, I'd even go as far as saying that it's up there and competing with the giants. The Sony Z2 Compact camera is a potato in comparison. The keyboard feels a bit cheap and some keys make a squeeking noise, but it's still better than touchscreen typing by far. I've dropped the phone on a number of occassions, it hasn't broken once. The backside tend to pop out, but it's easy to put it back in place again. My biggest complain about the hardware would be the screen, as I haven't access to any protective accessories my screen is pretty scratched by now. It doesn't affect what's displayed on the screen (yet) however, but yeah, I think it scratch too easily. Like I said, the OS is Android, and it's been fairly problem free for being Android. However, lately it has been a bit too agressive in shutting down apps in the background. But I don't know if that is BB's own build's fault or Android in general. There are some pre-installed "security" apps which gives the feeling of the phone being more secure than your other average Android phone. I don't use them though.
My over all impression of the KeyOne is 8 out of 10 I'd say, and I think I'll keep it until it literally fall apart.
Really, I didn't even care that it was Blackberry, I've been getting so tired of the software keyboards that I couldn't even consider the others once I saw it. And for me, it was definitely worth it. Now I can actually touch-type again without having to pause between words to check I didn't mis-type anything - I can feel it, just like missing a key on a regular keyboard.
KEY2 is available in the US.
In other words it's the phone (Android + BB keyboard) they should have made years ago, and many were hoping for.
https://www.forbes.com/sites/greatspeculations/2018/10/01/bl...
Their handset business is almost completely wiped out. The catch is that they're making their money off enterprise software and services. They also still have their QNX business, but maintaining their lead in the automotive sector will be challenging. It remains to be seen how long their strategy will work.
[1] https://www.reuters.com/article/us-blackberry-results/blackb...
Honestly it made me lose all interest in any other phone.
In the past I have had to install a root CA (for AWS or LE, I forget which), I have to use FTP to get my pictures off, but the trade-off is worth it in my book.
I always get an amazing amount of push-back (from astonishment to outright "you're wrong") from people who argue that no-one should ever want anything except what Apple and Google want to push. Well, some people do!
That is extremely unhelpful, Tech Crunch.
Let's take a look at what Isara is researching.
https://www.isara.com/research-publications/
https://www.isara.com/qtesla/
https://www.isara.com/qc-mdpc-kem/
Okay, so the article is specifically talking about digital signatures, so they're almost certainly implementing qTESLA (or a Blackberry-specific variant thereof), which is a lattice-based signature algorithm.
https://qtesla.org/wp-content/uploads/2018/08/qTESLA_v2.2_08...
https://github.com/qtesla/qTesla
If this does turn out that they're implementing qTESLA (which is committed to the public domain), the headline "races ahead of security surve" will prove to be needlessly sensationalist.
My point being, what reason do we have to believe these are safe cryptosystems.
https://www.youtube.com/watch?v=QCsvBFFLsqE
https://latticehacks.cr.yp.to/
https://en.wikipedia.org/wiki/Mike_Lazaridis
So no surprise they take quantum seriously ;)
And if quantum resistant crypto is in place by the time serious quantum computing is in place, I assume the main application of quantum will be to read all stored, previously encrypted secrets out there.