at the same time, (some of) the awesome people are still here, and they're still doing amazing stuff :)
EDIT: :)'d
82 karma · joined February 19, 2021
at the same time, (some of) the awesome people are still here, and they're still doing amazing stuff :)
EDIT: :)'d
> Let us remark that the modulus-noise ratio achieved by our quantum algorithm is still too large to break the public-key encryption schemes based on (Ring)LWE used in practice. In particular, we have not broken the NIST PQC standardization candidates. For example, for CRYSTALS-Kyber [BDK+18], the error term is chosen from a small constant range, the modulus is q = 3329, the dimension is n = 256 · k where k ∈ {3, 4, 5}, so we can think of q as being almost linear in n. For our algorithm, if we set αq ∈ O(1), then our algorithm applies when q ∈ Ω^~(n^2), so we are not able to break CRYSTALS-Kyber yet. We leave the task of improving the approximation factor of our quantum algorithm to future work.
Well, it isn't. This is a strategic choice, and one pretty much every military took