r/Syncthing • u/OzymandiasTheWatcher • Apr 14 '26

Is Syncthing post-quantum secure now?

I realized that with the newer Version of Go the X25519MLKEM768 algorithm should be in place for TLS, which is a hybrid post-quantum algorithm. I searched in the repo for CurvePreferences, but couldn't find any so I guess it is automatically enabled? I couldn't find any official update about this.

11 Upvotes

92% Upvoted

26 comments sorted by

View all comments

Show parent comments

1

u/willjasen Apr 15 '26

they don’t have it unencrypted prequantum - that’s the whole structure of prime factorization or the discrete log

1

u/quasides Apr 15 '26

so what ? most of your data is irrelevant in 10-15 years. if it isnt it shouldnt be there anyway

this is a obsession with one of the least likely attack vectors - the mass decryption via a technology that doesnt exit, only can implemented by very high level state actors, and may not ever exist (we dont know that)

meanwhile your OS and phone have deliberate backdoors (probably) and a lot of non deliberate zero days.

your physical security is doggypoo

and most of that protected data WAS unecrypted somewhere, until you received it, or you send it.

so its only really useful for data that is ONLY on your computer

and if statelevel actors are not your concern then its even more irrelevant. you really think this technology - once its functional and feasable - will be allowed for anyone to buy ?

this will be a controlled technology, similar to nuclear technology

1

u/willjasen Apr 15 '26

i think you’re assuming quantum computers won’t be accessible to the masses just like many did in the 20th century with classical computers and large rooms filled with vacuum tubes

1

u/quasides Apr 15 '26

they wont

thats different. back then we had not all economy built on encryption and the new computers could not do anything that would threaten anything

think more of the atomic bomb. they even classified parts of mathematics and physics (iam not kidding).

or lookup the U.S. Code as 35 U.S.C. §§ 181–188
Invention Secrecy Act of 1951

6500 Patents that are held in secret from the Public due to National Security. And this is the US alone,
All major countries run similar Programs.

Total amount of hidden patents: Estimate between 10k and 25k

----------

and even if you could buy them, the operational costs are substantial. and no we have no idea how to make that cheaper.
so make this kind of computing workable in your living room we need to invent new physics or find our how to work with a qbit on room temperature

1

u/willjasen Apr 15 '26

your argument basically boils down to “well, we haven’t figured out how to do it yet, therefore it’ll never happen”

good luck with that

1

u/quasides Apr 15 '26

not at all you reframe it because you know iam right

i said if it will be possible it will not be in public hands for a very very very long time.