Breaking RSA Encryption with Quantum Computer

[krashfire]

https://news.bitcoin.com/chinese-researchers-claim-success-in-breaking-rsa-encryption-with-quantum-computer-experts-debate-veracity-of-discovery/

Is this true? A Quantum computer could break RSA encryption now? I thought it should take another 10 years at least

[Baofeng]

I'm no expect in Quantum Computing, but I will refer you to this thread,  I don't believe Quantum Computing will ever threaten Bitcoin.

It's been one of the hottest topic though in the last couple of years. But me thinks that if ever Quantum Computer will break the encryption then we should adjust and evolved as well.

I'm just skeptic of the news though, specially coming from the Chinese as we are used to have a lot of FUD coming from them specially about Bitcoin.

Another good thread to ponder:  Bitcoin's latest decline was triggered by quantum computing headlines.

[mocacinno]

it seems the world is focussing on bitcoin once again... I saw a similar article in several local newspapers (saying things like "quantum computers will kill bitcoin"). What people seem to forget is that RSA encryption is all around... If it gets broken, the world has bigger problems than killing bitcoin (imho).

[DaveF]

it seems the world is focussing on bitcoin once again... I saw a similar article in several local newspapers (saying things like "quantum computers will kill bitcoin"). What people seem to forget is that RSA encryption is all around... If it gets broken, the world has bigger problems than killing bitcoin (imho).

Exactly this. New users keep asking this again and again in the forum and it's the same answer again and again. IF RSA gets broken. BTC is going to be the least of the issues. The credit card industry would implode, followed by the banking industry followed by everything else that relies on encryption for transactions. BTC is such a small part of that to make it not worth mentioning.

-Dave

[blockman]

I have seen this type of worry years ago and there's even one news that I've read that said will overtake blockchain, but where did it go?
The thing is, when people are too optimistic about the downfall of bitcoin with such technology as quantum computing, it's never been new. It's been there for years ago and it's still fresh on my mind that there were too many articles that are optimistic about kicking off bitcoin's blockchain but never proceeded and were unsuccessful.

[o_e_l_e_o]

Maybe we could try reading the actual report rather than just believing click bait headlines?

We demonstrate the algorithm experimentally by factoring integers up to 48 bits with 10 superconducting qubits, the largest integer factored on a quantum device. We estimate that a quantum circuit with 372 physical qubits and a depth of thousands is necessary to challenge RSA-2048 using our algorithm.

They managed to factor a 48 bit integer. So nowhere near the 2048 bits needed for RSA 2048. To do this, they say they need a quantum computer which doesn't exist and which utilizes technology which doesn't exist. If I publish a paper talking about a new space rocket design, that doesn't mean I've been to Mars.

We've known for years there are methods that advanced quantum computers will be able to use to attack our current encryption schemes. We also know that such computers are decades away. This Chinese paper tells us nothing new.

[Carlton Banks]

The credit card industry would implode, followed by the banking industry followed by everything else that relies on encryption for transactions.

so credit cards (or their network protocols) use RSA keys

They managed to factor a 48 bit integer. So nowhere near the 2048 bits needed for RSA 2048. To do this, they say they need a quantum computer which doesn't exist and which utilizes technology which doesn't exist. If I publish a paper talking about a new space rocket design, that doesn't mean I've been to Mars.

lol

the mathematics that Bitcoin keys use is not RSA. Unfortunately, people seem to treat the expression "quantum computer" as meaning "magic computer that knows every answer to every question, before you even finish thinking of the question"

[seoincorporation]

Maybe we could try reading the actual report rather than just believing click bait headlines?

We demonstrate the algorithm experimentally by factoring integers up to 48 bits with 10 superconducting qubits, the largest integer factored on a quantum device. We estimate that a quantum circuit with 372 physical qubits and a depth of thousands is necessary to challenge RSA-2048 using our algorithm.

They managed to factor a 48 bit integer. So nowhere near the 2048 bits needed for RSA 2048. To do this, they say they need a quantum computer which doesn't exist and which utilizes technology which doesn't exist. If I publish a paper talking about a new space rocket design, that doesn't mean I've been to Mars.

We've known for years there are methods that advanced quantum computers will be able to use to attack our current encryption schemes. We also know that such computers are decades away. This Chinese paper tells us nothing new.

You are right o_e_l_e_o, looks like they are one step closer, but they haven't reached the goal yet. The thing is, now they are in the right road, which means now is the right way to give the new step in encryption. We need something complex and almost impossible for quantum computers because we are not sure how fast that technology will evolve, maybe in 5 years they become madness, that's hard to predict.

[digaran]

How exactly RSA is related to bitcoin?

[BitcoinBarrel]

Quantum computing is science-fiction not reality.

[Kryptowerk]

https://news.bitcoin.com/chinese-researchers-claim-success-in-breaking-rsa-encryption-with-quantum-computer-experts-debate-veracity-of-discovery/

Is this true? A Quantum computer could brewk RSA encryption now? I thought it should take another 10 years at least

News-feeds/websites/papers tend to opt for attention gaining headlines this is not new. Just vapor to disguise the nothingsness that acutally happened.
I know it's kinda off-topic, but since she is one of the best scientists I am aware of actively working against mis-representation of new science discoveries, I want to recommend Sabine Hossenfelder's youtube channel: https://www.youtube.com/@SabineHossenfelder/videos

She has done extensive coverage of the quantum-hype, as well as interesting topics such asdark-matter, black-holes, nuclear-fusion and other topics that tend to dominate the soft-science news-headlines.

[suzanne5223]

Firstly, Bitcoin Core encrypts its wallet using the AES not the RSA encryption algorithm and for the record, AES is what was used by the NSA for their classified info. As said by another user if it happened that a quantum computer break AES encryption, the problem won't be only for Bitcoin, the NSA, card company, and others government intelligence agency will be affected. However, it will be long before a quantum computer that can do that will be developed.

[jackg]

Did it say what size RSA the researchers were able to crack? I couldn't find it while I was skimming the article and those keys are already huge because of how weak the algorithm is. 128bit is considered fairly easy to crack afaik and that's not even considering if a medium sized tech firm was interested in cracking them.

If the US or China crack quantum proof encryption, they're telling no one before they make a profit off it and sell it to a Russian/South American cartel or some random government they think will profit them. At the moment it would be a leap considering how volatile quantum bits seem to have been made so far (I thought this was the main issue research has faced so far).

Firstly, Bitcoin Core encrypts its wallet using the AES not the RSA encryption algorithm and for the record, AES is what was used by the NSA for their classified info. As said by another user if it happened that a quantum computer break AES encryption, the problem won't be only for Bitcoin, the NSA, card company, and others government intelligence agency will be affected.

AES is quantum resistant, much like Sha256.

The elliptic curve encryption bitcoin uses isn't considered to be quantum proof but it's not hard to change algorithms and only addressed that have spent funds are vulnerable (a lot of people should be unaffected by that unless you're using wallets with only a few addresses - after spending from an address, your funds are often sent to "change" addresses too).

[BitDane]

It has been established by several discussions that Quantum Computer needs many years before they can crack Bitcoin security[1][2][3], of course Bitcoin security algorithm will be adjusted once the developer felt that there is a need for adjustment even before Quantum computer cracks Bitcoin's security.  But media is stubborn enough to make any development of Quantum Computer related to Bitcoin security issue. Isn't the news a good timing for Bitcoin's a little bit of market recovery?  It looks like someone is pulling some strings to keep Bitcoin in the current price or aim to pull it lower.


[1] https://decrypt.co/101340/bitcoin-quantum-computing
[2] https://cointelegraph.com/news/why-quantum-computing-isn-t-a-threat-to-crypto-yet
[3] https://www.newscientist.com/article/2305646-quantum-computers-are-a-million-times-too-small-to-hack-bitcoin/

[o_e_l_e_o]

Did it say what size RSA the researchers were able to crack?

They weren't able to crack any size of RSA key.

The largest number they were able to factorize was 48 bits. The minimum recommended size for RSA keys is 2,048. They weren't even close, even to older 1,024 keys which are still in circulation. The RSA-100 number, which has 330 bits, was factorized in 1991, and can be factorized on a modern computer in a matter of minutes. 48 bits isn't even close to this number either.

The whole thing is a clickbait nothing burger. The difference between 48 bits and 2,048 bits really can't be understated. It would be like newspapers in 1969 announcing we had colonized the solar system after landing on the moon.

and only addressed that have spent funds are vulnerable

That's not quite accurate. There are also millions of coins in old style P2PK outputs which are vulnerable, and since taproot no longer hashes public keys then coins in P2TR outputs are vulnerable as well. Not to mention all the public keys which have been revealed through other means, such as SPV wallets, watch only wallets, payment processors, signed non-transaction messages, etc. And obviously the public keys which will be revealed as soon as a transaction is broadcast. Relying on the public key being hashed is a poor defense against quantum computers. Rather we will implement some quantum resistant scheme when the time comes.

[dansus021]

Exactly this. New users keep asking this again and again in the forum and it's the same answer again and again. IF RSA gets broken. BTC is going to be the least of the issues. The credit card industry would implode, followed by the banking industry followed by everything else that relies on encryption for transactions. BTC is such a small part of that to make it not worth mentioning.

-Dave

yeah I saw it too and a bunch of it,
and I do believe before its gonna happen bitcoin and the other already creating some new encryption way more secure than RSA beside that quantum is early technology

"Quantum computers are known to be a potential threat to current encryption systems, but the technology is still in its infancy. Researchers typically estimate that it will be many years until quantum computers can crack cryptographic keys — the strings of characters used in an encryption algorithm to protect data — faster than ordinary computers." - https://www.nature.com/articles/d41586-023-00017-0

But we will doomed if AI with brain of quantum computer exist 

[pooya87]

It is also worth pointing out that even the 2048-bit RSA key is less secure than a 256-bit EC key (112 vs 128). Don't be fooled by the bigger number, RSA keys provide a lot less security. The only significance of the article is the algorithm they used and how they reduced the number of qubits required, not that we are any closer to breaking actual keys in use in the near future.

[Kakmakr]

You know that most secure services like SSL on websites and also services used by the Banking sector and other financial services use RSA Encryption technology ... right?

So why do you think this FUD is only targeted at Bitcoin as a huge threat? I will tell you why, because Bitcoin is a threat to the people who are spreading this FUD... because they want the uniformed slaves of their financial system .... to fear Bitcoin. (even if this is a bunch of lies)

Just get the truth out there... and how we already solved this possible threat, with counter measures.  

[Carlton Banks]

It is also worth pointing out that even the 2048-bit RSA key is less secure than a 256-bit EC key (112 vs 128). Don't be fooled by the bigger number, RSA keys provide a lot less security. The only significance of the article is the algorithm they used and how they reduced the number of qubits required, not that we are any closer to breaking actual keys in use in the near future.

right, improving the algorithm isn't so impressive when the hardware that could use the improved algorithm is still infeasible

[o_e_l_e_o]

You know that most secure services like SSL on websites and also services used by the Banking sector and other financial services use RSA Encryption technology ... right?

There is a difference here in that a centralized service such as a bank can much more easily swap to a new quantum resistant technology than we can on bitcoin. They can simply update their back end, as opposed to needing to hard fork an entire decentralized network. Further, they don't have to care about some of the same considerations that we do. Take Lamport signatures as an example. They should only ever be used once, as each subsequent signature makes it easier and easier for an attacker to forge a signature. For bitcoin this would mean a huge overhaul of how wallets (or even the whole network) works to prevent anyone from using the same address more than once. For a bank, then can just generate new keys as needed. Or the fact that Lamport public keys and signatures can be dozens of kilobytes in size. Irrelevant for a centralized service, but catastrophic for bitcoin blocks.

While quantum computers pose no risk to bitcoin at the moment, and won't for many years to come, we will have some of the most specific demands when it comes to selecting a quantum resistant algorithm to use.