Measuring Human Cryptanalysis Effort
A new research tool estimates cumulative cryptanalyst-hours spent on each public-key algorithm, offering a quantitative basis for assessing cryptographic maturity ahead of post-quantum migration.
Summary written by editorial AI · Source link below
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument. From roughly sixteen thousand candidate papers we classify cryptanalytic work on ECDLP, structured and plain lattices, syndrome decoding and their comparators, then convert papers into estimated research-allocat
Editorial Analysis
Understanding how thoroughly each algorithm has been scrutinised helps enterprises make evidence-based decisions when planning post-quantum cryptographic transitions.
Review the published analysis-effort data to inform your organisation's cryptographic agility and post-quantum migration roadmap.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at Schneier on Security in a new tab.
More from the Research Desk
- Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication3d
- Not Where You Think: Protecting Location Privacy Against Reasoning-Based Geolocation4d
- Social-HUMINT: An LLM-Augmented Unified Framework for Measuring Social Media Exposure4d
- Practical Auditing of Differentially Private Graph Release Mechanisms: Methodology, Toolkit, and Case Study4d
- SecLog-Bench: A Scalable Benchmark for Cybersecurity Log Reasoning with Scaffolded Evidence4d