Skip to content
TopicTracker
From HackerNewsView original
TranslationTranslation

RFC 9980 Post-Quantum Cryptography in OpenPGP

RFC 9980 defines a framework for integrating post-quantum cryptography into OpenPGP, specifying new algorithms, key formats, and protocol extensions to protect against future quantum-computer-based attacks. It updates the OpenPGP message format to support quantum-resistant cryptographic schemes.

Background

- **OpenPGP** is the encryption standard (RFC 4880) behind tools like GnuPG (GPG) and many email/cryptography services. Widely used for signing, encrypting, and verifying digital communications. - **Post-Quantum Cryptography (PQC)** refers to cryptographic algorithms designed to be secure against attacks from future large-scale quantum computers, which could break current widely-used algorithms (like RSA, DLP-based ECC). - **RFC 9980** is an informational document from the IETF that explores how to introduce PQC algorithms into the OpenPGP protocol. It discusses new key formats, signature schemes, and hybrid approaches (combining traditional and PQC algorithms) to enable a gradual transition. - This matters because OpenPGP is a foundational security layer in many systems; updating it for the quantum era is a significant practical challenge, and RFC 9980 maps out the design space for the community.

Related stories