Background
There are discussions in the cryptographic environment about the so-called quantum threat. The development of quantum computers has accelerated in recent years, which raises questions about the long-term safety of the solutions currently used.
Q-Day script
It is estimated that in the ~15-year perspective there may be a situation where public keys based on elliptical curves (as secp256k1) become vulnerable to attacks using the Shor algorithm. In this context, the "harvest now, decrypt later" – opponents can store encrypted data today and decrypt it later when quantum technology is available.
Evaluation of the current implementation
The Bitmessage network uses AES-CBC (PyBitmessage version), which is a challenge against quantum computers due to Grover's limited acceleration of the bruteforce. However, the Shor algorithm can effectively break security based on secp256k1. Due to the network architecture in which the facilities are temporarily stored in public, there is a risk of third parties collecting encrypted data.
Given the above, the Bitmessage network may not provide sufficient security for data requiring long-term confidentiality.
Status of project development
In the last three months I have worked on the project MiNode-Refined (MiNode's fork by Lee Miller). Deciding that the project requires evolutionary changes adapted to modern safety requirements, I decided to end its development. The last version will be 0.3.0.
At the same time, I intend to complete work on the parallel project PyBitRefined (new Python 3 client for PyBitmessage).
The planned directions
The future work will focus on the development of a new project based on the protocol referring to the foundations of Bitmessage, adapted to modern security requirements. I invite you to track development on Codeberg or participate in cooperation when it is available soon.
Acknowledgements
I want to express my gratitude to those involved in the development of the ecosystem:
| Jonathan Warren | Original Bitmessage protocol and implementation since 2012, maintenance for 4 years |
| Peter Surda | Care of PyBitmessage for another 10 years |
| Krzysztof Oziomek | Project MiNode, integration with I2P |
| Lee Miller | MiNode Maintenance for another 8 years |
Note: This announcement is informative. I encourage the community to discuss potential migration towards quantum computer-resistant cryptography (Post-Quantum Cryptography).
Background
There are discussions in the cryptographic environment about the so-called quantum threat. The development of quantum computers has accelerated in recent years, which raises questions about the long-term safety of the solutions currently used.
Q-Day script
It is estimated that in the ~15-year perspective there may be a situation where public keys based on elliptical curves (as secp256k1) become vulnerable to attacks using the Shor algorithm. In this context, the "harvest now, decrypt later" – opponents can store encrypted data today and decrypt it later when quantum technology is available.
Evaluation of the current implementation
The Bitmessage network uses AES-CBC (PyBitmessage version), which is a challenge against quantum computers due to Grover's limited acceleration of the bruteforce. However, the Shor algorithm can effectively break security based on secp256k1. Due to the network architecture in which the facilities are temporarily stored in public, there is a risk of third parties collecting encrypted data.
Given the above, the Bitmessage network may not provide sufficient security for data requiring long-term confidentiality.
Status of project development
In the last three months I have worked on the project MiNode-Refined (MiNode's fork by Lee Miller). Deciding that the project requires evolutionary changes adapted to modern safety requirements, I decided to end its development. The last version will be 0.3.0.
At the same time, I intend to complete work on the parallel project PyBitRefined (new Python 3 client for PyBitmessage).
The planned directions
The future work will focus on the development of a new project based on the protocol referring to the foundations of Bitmessage, adapted to modern security requirements. I invite you to track development on Codeberg or participate in cooperation when it is available soon.
Acknowledgements
I want to express my gratitude to those involved in the development of the ecosystem:
| Jonathan Warren | Original Bitmessage protocol and implementation since 2012, maintenance for 4 years |
| Peter Surda | Care of PyBitmessage for another 10 years |
| Krzysztof Oziomek | Project MiNode, integration with I2P |
| Lee Miller | MiNode Maintenance for another 8 years |
Note: This announcement is informative. I encourage the community to discuss potential migration towards quantum computer-resistant cryptography (Post-Quantum Cryptography).