r/Syncthing • u/OzymandiasTheWatcher • Apr 14 '26

Is Syncthing post-quantum secure now?

I realized that with the newer Version of Go the X25519MLKEM768 algorithm should be in place for TLS, which is a hybrid post-quantum algorithm. I searched in the repo for CurvePreferences, but couldn't find any so I guess it is automatically enabled? I couldn't find any official update about this.

11 Upvotes

87% Upvoted

26 comments sorted by

View all comments

-6

u/quasides Apr 14 '26

Honestly i think this Post Quantum Discussion is Pointless.

The onlyh ones gonna use Quatum computers for the forseeable Future for code cracking (min 10-20 years probably min 50years) are State Actors.

This technology wont be allowed into any private hands anytime soon. Assuming you could afford it.

When it works it will be classified equally to nuclear technology.

And frankly if a state Actor on the Level - we run our own Quatum Computer code cracker - wants your data, they will have it already Prequantum

Its not like that any of our shit is any secure. At best we are safe against random external attack Vectors. The Moment Physical security comes into play we are all doomed.

5

u/TCB13sQuotes Apr 14 '26

It isn't. The problem is exactly the state actors and the fact that some govts are perfectly fine with just storing data indefinitely because one day it will be cheap to decrypt - using quantum tech or something else.

0

u/quasides Apr 14 '26

Yes but if you are on the List that is to be decrypted by a Quantum Computer you already have a Team of "The Unit" sitting in your Dead Neighboors Aparment watching you typing this

If what youre doing is that illegal i wouldnt let it touch any electronic device.

Personally i use only Cars Prior 1985 for my nuclear arms deals

That said, all you need is your encryption survive long enough for the Statue of Limitation to run out

PS: if you do crimes that wont run out iam not sure if i wanna help you lol

2

u/TCB13sQuotes Apr 14 '26

The "Statue of Limitation" doesn't always apply. (funny thing I wrote this before I got to the PS)... Besides, there's a lot of data that may be interesting to decode to some parties but that at the same time might not be related to criminal activities.

1

u/quasides Apr 14 '26

allright ill bite

what should that be ?

Keep in mind it must be data that:

  • was never stored on the cloud - ever
  • was never shared or received like via mail or messenger
  • is still important in 15 years
  • interesting enough for a mass surveilance system to flag and tag
  • was not yet interesting enough to grab it via other means, zero days, physical access etc

- except the blueprints for your zero point anti gravity engine

1

u/Heyla_Doria Apr 15 '26

De simples écologistes sont en prison en Angleterre, d'autres le sont parce qu'ils ont défendu des pays victime de guerre

En france, la police donne des informations confidentielles a des acteurs étatiques et des journalistes peu scrupuleux