Post-Quantum Cryptography and HashiCorp Vault
summary
Explains why Shor's algorithm breaks RSA and Diffie‑Hellman while Grover's algorithm halves symmetric key strength, notes current quantum devices sit below ~100 qubits and require orders of magnitude more plus error correction, and cites a Neven‑law style doubly‑exponential advance that could make attacks plausible in the late 2030s–2040s. Describes concrete Vault choices: AES-256-GCM for storage resistance, adding ChaCha20‑Poly1305 in 2018, using seal wrap with external HSMs for FIPS compliance, and leveraging quantum entropy for RNG.
AI-written summary · about
chapters (13)
- 0:00Introduction to talk
- 2:27Why quantum cryptography matters
- 3:28Quantum mechanics basics
- 6:56Quantum vs classical computing
- 12:30Breaking cryptography methods
- 14:19Shor’s and Grover’s algorithms
- 21:39Quantum computing threat today
- 23:03Post-Quantum Crypto Standardization
- 25:05Vault’s quantum defenses
- 26:48Quantum benefits for Vault
- 28:34Quantum timeline and risks
- 30:20FIPS 140 compliance in Vault
- 34:17Quantum computing book recommendations
related talks
28mPost-Quantum Manifesto
32mCybersecurity in Post Quantum Era
19mPost-Quantum Cryptography
30mNavigating the Quantum Readiness Journey: Hands-on Guidance for Starting Your Migration-
40mWhy Quantum Safe Encryption Is the Next Y2K and How to Be Prepared
13mQuantum Computing Encryption
44mWhy Quantum Safe Encryption Is the Next Y2K, and How To Be Prepared
46mAchieving Quantum Readiness: A Comprehensive Approach