{
  "url": "https://fahrplan.events.ccc.de/rc3/2020/Fahrplan/events/11450.html",
  "id": 11450,
  "guid": "8622c2fd-f114-4744-b1b4-957b39e95fbc",
  "logo": "/system/events/logos/000/011/450/large/Tutanota-logo.jpg?1605864293",
  "date": "2020-12-27T17:10:00+01:00",
  "start": "17:10",
  "duration": "00:40",
  "room": "chaosstudio-hamburg",
  "slug": "rc3-11450-pq_mail_enabling_post_quantum_secure_encryption_for_email_communication",
  "title": "PQ Mail: Enabling post quantum secure encryption for email communication",
  "subtitle": "",
  "track": "IT-Security",
  "type": "Lightning Talk",
  "language": "en",
  "abstract": "The Internet as we know it depends on encryption: confidential communication, financial transactions, critical infrastructure - all of these are at risk if encryption can be broken. Today all sorts of players heavily invest in developing quantum computers. These computers promise to bring great advantages and speeds to information technology. But they are also developed to become unprecedented surveillance machines. The race is on between quantum computers and quantum-resistant cryptography.\r\nIn the talk we present our approach how to achieve post-quantum security as well as forward and future secrecy by implementing a pre- and post-quantum secure communication protocol based on the Signal protocol.",
  "description": "Email communication - even when encrypted - is saved on a huge scale (e.g. by the NSA) and can be decrypted once there is a large-scale universal quantum computer. That's why we need to take action now and enable everyone to easily encrypt sensitive emails with post quantum secure algorithms.\r\n\r\nTogether with the L3S of Leibniz University Hanover, we at Tutanota have started a research project to achieve just that: PQ Mail.\r\n\r\nThis project aims at implementing a hybrid encryption protocol based on the Signal protocol in Tutanota, combining the algorithms currently used in Signal (ECDH and XEdDSA) with quantum-safe encryption schemes. With this we plan not only to achieve post-quantum end-to-end encryption, but also future and forward secrecy.\r\n\r\nIn this talk we will present our approach and address the obstacles we are facing when implementing it, such as:\r\n\r\n* Keeping the security properties of the Signal protocol without a suitable post quantum Diffie-Hellman equivalent\r\n\r\n* Satisfying expectations for email usage while using a stateful protocol\r\n\r\n* Making sure the encryption and decryption of emails can be achieved fast, even on mobile devices.",
  "recording_license": "",
  "do_not_record": false,
  "persons": [
    {
      "id": 12773,
      "public_name": "Vitor Sakaguti"
    },
    {
      "id": 12774,
      "public_name": "Sara"
    },
    {
      "id": 12803,
      "public_name": "A.L. Fehlhaber"
    }
  ],
  "links": [
    {
      "url": "https://tutanota.com/blog/posts/pqmail-launch-post-quantum-cryptography/",
      "title": "L3S of Leibniz University and Tutanota launch research project to secure emails against quantum computer attacks."
    },
    {
      "url": "https://main.sec.uni-hannover.de/projects/pq-mail/",
      "title": "TeamUSEC PQmail"
    }
  ],
  "attachments": [],
  "room_id": "008e96f4-1a64-46d3-af2e-7ae75fed1763",
  "origin": null
}