Is the Tor Network Ready for Quantum Computers?

Quantum computers are becoming more powerful, and with them come new risks to our privacy. Algorithms like Shor's and Grover's could decrypt today's encrypted data in the future, an attack known as 'harvest now, decrypt later'. The Tor network, famous for protecting online privacy, uses cryptography that might not be secure against these attacks. New research proposes a way to assess how post-quantum cryptography (PQC) could affect Tor. Scientists simulated a local Tor network to measure the time taken by classical cryptography. They then compared these times with those of secure quantum algorithms. Finally, they estimated the impact of replacing traditional cryptography with PQC. This approach allows understanding the potential impact without fully implementing PQC. The research focuses on replaceable cryptographic components and uses theoretical estimates and existing benchmarks to gain valuable insights.

Post-quantum cryptography (PQC) is an emerging field aimed at developing cryptographic algorithms resistant to quantum computer attacks. Unlike traditional cryptography, which relies on mathematical problems such as prime factorization or discrete logarithms, PQC uses mathematical problems considered resistant to quantum computers. Some of the main candidates for PQC include mathematical lattices, trapdoor functions, and isogenic curves. Mathematical lattices, for example, exploit the complexity of lattice problems to create secure cryptographic schemes. Trapdoor functions, on the other hand, use mathematical functions that are easy to calculate in one direction but hard to reverse. Isogenic curves, finally, are based on the mathematical properties of elliptic curves to create resistant cryptographic schemes. Research on PQC is still ongoing, and many algorithms are in the evaluation and standardization phase. Organizations like the National Institute of Standards and Technology (NIST) are working to identify and standardize the most promising PQC algorithms. The migration to PQC requires a careful assessment of the performance and security of the proposed algorithms. Simulating a local Tor network, as described in the research, is an important step in understanding the impact of PQC on existing cryptographic systems.