Show HN: filippo.io/mlkem768 – Post-Quantum Cryptography for the Go Ecosystem

Hello from Kudelski Security. This is super timely, because we recently had to discontinue one of the other only existing Go libraries for quantum-resistant cryptography in Go! Full story at <a href="https:&#x2F;&#x2F;research.kudelskisecurity.com&#x2F;2024&#x2F;02&#x2F;01&#x2F;the-kyberslash-vulnerability-and-the-crystals-go-library-a-retrospective-story&#x2F;" rel="nofollow">https:&#x2F;&#x2F;research.kudelskisecurity.com&#x2F;2024&#x2F;02&#x2F;01&#x2F;the-kybersl...</a>

So what is the actual state of Quantum computing in regards to the level that would make something like this necessary?<p>Is it become like AI where instead of actually coming into existence the definition is mostly just changing to bring forth a new product under a previously existing name?

Perhaps relevant to the discussions is this friendly book on crypto systems implementation in the latest version of Go by John Arundel. Inside the last section there is a passing mention on post quantum crypto. Perhaps if John can update the book later with this library once the NIST PQ is standardized.<p>Explore Go: Cryptography (Go 1.22 edition):<p><a href="https:&#x2F;&#x2F;bitfieldconsulting.com&#x2F;books&#x2F;crypto" rel="nofollow">https:&#x2F;&#x2F;bitfieldconsulting.com&#x2F;books&#x2F;crypto</a>

Correct me if I&#x27;m wrong, but if it&#x27;s written in pure Go, wouldn&#x27;t that make it susceptible to timing&#x2F;power side channel attacks?

Anyone aware of such implementations for other languages (java, c#, etc)?

Neat that it can also work as draft00&#x2F;kyber v3 =)<p>How hard would it be to support a fast Kyber 90&#x27;s mode, without SHA-3? (I suppose you would have to break the abstraction for that one).

Unrelated, but c&#x27;mon Filo, the 32 bit syscall table is still &#x27;coming soon&#x27; :&#x27;)

I have no ability to judge the quality of this algorithm or implementation, but I do thoroughly approve of the usage of unicode in variable names:<p><pre><code> ρ, σ := G[:32], G[32:] </code></pre> Somehow much better than seeing &quot;rho&quot;, &quot;sigma&quot;.

The same guy that brought us <a href="https:&#x2F;&#x2F;github.com&#x2F;FiloSottile&#x2F;age">https:&#x2F;&#x2F;github.com&#x2F;FiloSottile&#x2F;age</a><p>I really like this tool.

Spec: <a href="https:&#x2F;&#x2F;nvlpubs.nist.gov&#x2F;nistpubs&#x2F;FIPS&#x2F;NIST.FIPS.203.ipd.pdf" rel="nofollow">https:&#x2F;&#x2F;nvlpubs.nist.gov&#x2F;nistpubs&#x2F;FIPS&#x2F;NIST.FIPS.203.ipd.pdf</a> (linked from the article)

Whatever happened to &quot;don&#x27;t roll your own crypto&quot;? Isn&#x27;t this work best left to OpenSSL for example.