Hello everyone, I keep reading about recent developments in the quantum computing field, with whatever this may mean for classic asymmetric encryption/key exchange algorithms. More specifically, it appears that both Google (Quantum frontiers may be closer than they appear <https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/>) and Cloudflare (Cloudflare targets 2029 for full post-quantum security <https://blog.cloudflare.com/post-quantum-roadmap/>) have targeted 2029 for post-quantum migration. Both of these blog posts made me ponder about the post-quantum security of the OMEMO. I am not an expert on the field of asymmetric cryptography, but per XEP-0384 <https://xmpp.org/extensions/xep-0384.html>, OMEMO uses the X3DH key agreement protocol for key exchange and the Double Ratchet Algorithm for message encryption and decryption. From what I can grasp, Signal has developed the PQXDH key agreement protocol as a post-quantum secure variant of X3DH, while Double Rachet also seems to provide no post-quantum protection <https://signal.org/docs/specifications/doubleratchet/#harvest-now-decrypt-later-attacks>. With that being said, I'd like to ask if there are any plans to update the relevant OMEMO standard in the future to make OMEMO post-quantum-proof and if not, whether OMEMO's post-quantum security is considered trivial or not. Thanks in advance
There is work being done on a post-quantum version of omemo by Monocles for their XMPP client. You can find the link to its git repository here: https://codeberg.org/monocles/pq-omemo-2 (I'm unused to mailing lists, so I forgot to sign up before trying to send this reply via email, I have now signed up, and I am replying again incase the first one didn't go through due to me not having signed up, so if it is a duplicate I am sorry.)
participants (2)
-
Chris Tsichrinis -
Joey Schaff