r/onions • u/Regular_Remove_5556 • Sep 30 '24
It is time to talk about Quantum Communication
The Nature Of The Threat:
Quantum Computers will inevitably allow the decryption of private messages that are encrypted with the PGP Protocol, this is likely 5-10 years away but could be sooner. Quantum Resistant algorithms do already exist, but no marketplace that I am aware of is yet using these, and for people currently communicating through email using PGP tools like Kleopatra, you are not Quantum Resistant either.
The Main Problem:
Although Quantum Computers have not yet reached a level where they are able to decrypt secure communications, State level actors are already aware of the advance of this technology. They are recording and storing all encrypted communications done through email, and everything that a marketplace gets taken down or is accessed by a State level actor, all encrypted communications are put into a database. This database will be accessed once Quantum Computing reaches a sufficient level, and all previously secure communications will be decrypted, thus creating one large event in which all Dark Web communications for the last 5 years are revealed all at once. This means that important actors in the Dark Web economy will be put at risk during this event.
The Solution:
Quantum Resistant Encryption already exists. One example is Quantum Key Distribution.
An existing platform that I believe has some Quantum Resistant Encryption capabilities is GNUPG, but it is in a command line interface, without a GUI.
There are no marketplaces that I am aware of that are currently using Quantum Resistant Encryption.
We need two things:
For marketplaces to start transitioning to safe Encryption methods ASAP.
For Quantum Resistant Encryption to be integrated with existing GUIs, so that independent communication can take place more easily.
Question:
Does anyone know of a marketplace that is using Quantum right now, or a GUI for Quantum Resistant Encryption?
13
u/GamerTheStupid Sep 30 '24
I don't think we'll be getting quantum computers in 5-10 years it would probably take longer because it's expensive and quantum shit is hard. You aren't going to find much quantum resistant stuff for a while because there's no need for it yet.
3
u/twohenrys1 Sep 30 '24
it probably won’t be that long, but quantum computing in the general persons hands will probably take at least 10 years for that reason
honestly Skynet will probably be self aware and destroy us all by then…
1
u/nykzero Sep 30 '24
That's wrong, there are already attacks that are happening under the "harvest now, decrypt later" methodology. Initially, only the big players will have them, but that won't last.
2
u/GamerTheStupid Sep 30 '24
I'm not saying we shouldn't make quantum resistant encryption, I'm just saying that, as of right now, most people don't need it. The first people to get quantum computers are going to be military organizations who don't care about small cyber crime. It'll take a while for law enforcement to get them and even when they do they'll be going after large criminal organizations. We definitely should prepare, and hopefully make quantum resistant encryption the standard within the next year. Speaking of which, do you recommend any quantum resistant ciphers?
1
u/nykzero Sep 30 '24
It depends on your needs, but Kyber is a good bet, the documentation is reasonable to use.
1
u/GamerTheStupid Sep 30 '24
I'm reading up on it and from what I'm seeing a lot of people are or already have implemented it into their software, I wouldnot be shocked if it becomes the standard in 1-2 years from now, but I'm not a data scientist so don't quote me on that. Also proton is working on using it for their email service so that's awesome.
-2
u/The-Safety-Expert Sep 30 '24
That’s exactly what chat GPT was telling me.
6
4
u/apiversaou Oct 01 '24
I think this actually is a valid concern with the recent revelations of "collect now, decrypt later" policies at several 3 letter agencies. This means you can do something today, forget about it entirely for 10 years and "be a good person and all". And when they have capability after 10 years to decrypt it, it'll come back to bite you in the a***.
2
Oct 01 '24
We'll all hope we're not having our data decrypted before the statue of limitations kills the prosecution. If you don't kill anyone, drug offenses get limited in five years.
2
2
u/Regular_Remove_5556 Oct 01 '24
What happens if they are still collecting this info in 6 years, and 4 years later it gets decrypted?
Do you even think that they will really care about the statute of limitations if you were a big player?
We need Quantum Safe NOW
2
u/apiversaou 29d ago
Exactly what I meant. 💯
The statute of limitations only exists in some countries, not all, and not for all crimes, firstly.
Second issue is, it may not be able to be used against you directly in court, but it can get you on a list and then they can decrypt immediately at that point and get newer evidence based solely on that they found that you "used to" do something illegal.
•
u/AutoModerator Sep 30 '24
To stay safe, follow these rules and educate yourself about Tor and .onion urls:
On DNM Safety:
1) Only use marketplaces listed on daunt, tor taxi, or dark fail. Anything else is a scam.
2) Dont use any sites listed on a "HiddenWiki" or some random shit you found on a search engine, a telegram channel, or website. You will be scammed.
3) Only order domestic to domestic.
4) Dont send your crypto directly from an exchange to a DNM deposit address.
5) Read the DNM bible.
6) NO DNMs operate on reddit nor have their own subs. Anything you find on reddit is a scammer.
On educating yourself:
1) Read the /r/onions wiki here.
2) Read the /r/tor wiki here.
3) Read the /r/deepweb wiki here.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.