[tor-dev] Quantum-safe Hybrid handshake for Tor

[William Whyte]

> I'd imagine everyone in this thread knows this, but New Hope requires
> that "both parties use fresh secrets for each instantiation".

NTRUEncrypt, which has also been proposed for this, can be used with
ephemeral or long-lived keys safely.

Cheers,

William
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20160422/c101711c/attachment.html>