X account: Probably the most important point here. Hashing is more conservative than EC from the perspective of a quantum adversary. For an AI adversary with only classical computers, we have no intuition that hashes are any better. Similar point can be made for hashes vs lattices too.
X account @noahcitron discusses the view that, under a quantum-adversary threat model, hash schemes are more conservative than elliptic-curve cryptography; for adversaries using only classical computers,AI there is currently no intuition that hashes are superior.
Article
Probably the most important point here.
Hashing is more conservative than EC from the perspective of a quantum adversary.
For an AI adversary with only classical computers, we have no intuition that hashes are any better.
Similar point can be made for hashes vs lattices too.
Key points
01
Probably the most important point here.
02
Hashing is more conservative than EC from the perspective of a quantum adversary.
03
For an AI adversary with only classical computers, we have no intuition that hashes are any better.
04
Similar point can be made for hashes vs lattices too.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
The explanation for “X account: Hashing is more conservative than EC from the perspective of a quantum adversary.” is insufficient; the available materials support only a factual excerpt.
Why it matters to readers
Verify the follow-up conditions for this event: whether papers, benchmarks, or cryptographic institutions have provided verifiable explanations of the relevant quantum and AI threat models.
Risks and unknowns
Whether papers, benchmarks, or cryptographic institutions have provided verifiable explanations of the relevant quantum and AI threat models.