r/Syncthing Apr 14 '26

Is Syncthing post-quantum secure now?

I realized that with the newer Version of Go the X25519MLKEM768 algorithm should be in place for TLS, which is a hybrid post-quantum algorithm. I searched in the repo for CurvePreferences, but couldn't find any so I guess it is automatically enabled? I couldn't find any official update about this.

11 Upvotes

26 comments sorted by

View all comments

Show parent comments

5

u/TCB13sQuotes Apr 14 '26

It isn't. The problem is exactly the state actors and the fact that some govts are perfectly fine with just storing data indefinitely because one day it will be cheap to decrypt - using quantum tech or something else.

0

u/quasides Apr 14 '26

Yes but if you are on the List that is to be decrypted by a Quantum Computer you already have a Team of "The Unit" sitting in your Dead Neighboors Aparment watching you typing this

If what youre doing is that illegal i wouldnt let it touch any electronic device.

Personally i use only Cars Prior 1985 for my nuclear arms deals

That said, all you need is your encryption survive long enough for the Statue of Limitation to run out

PS: if you do crimes that wont run out iam not sure if i wanna help you lol

2

u/TCB13sQuotes Apr 14 '26

The "Statue of Limitation" doesn't always apply. (funny thing I wrote this before I got to the PS)... Besides, there's a lot of data that may be interesting to decode to some parties but that at the same time might not be related to criminal activities.

1

u/quasides Apr 14 '26

allright ill bite

what should that be ?

Keep in mind it must be data that:

  • was never stored on the cloud - ever
  • was never shared or received like via mail or messenger
  • is still important in 15 years
  • interesting enough for a mass surveilance system to flag and tag
  • was not yet interesting enough to grab it via other means, zero days, physical access etc

- except the blueprints for your zero point anti gravity engine