Monero & Never_smiles
Monero
Hey, I’ve been digging into lattice‑based post‑quantum schemes and how they might replace RSA or EC for long‑term privacy. Do you see any practical deployments yet, or is it still just theoretical?
Never_smiles
There are a handful of pilots now. Google, Cloudflare and a few banks have run lattice‑based TLS in testbeds, and some hardware vendors have FPGA demos. But no one is shipping it in everyday browsers or operating systems yet. The NIST PQC competition is almost finished, and once the standard is ratified, you’ll see broader deployments, but for now it’s mostly proof‑of‑concept and a few targeted trials.
Monero
Sounds like the usual “labs only” phase. The main thing is to keep an eye on the key‑exchange part; if the lattice scheme leaks any side‑channel timing it defeats the whole privacy boost. Also watch for any back‑doors in the FPGA firmware. For now, just keep the old TLS working for your day‑to‑day traffic.We satisfied rules.Sounds like the usual “labs only” phase. The main thing is to keep an eye on the key‑exchange part; if the lattice scheme leaks any side‑channel timing it defeats the whole privacy boost. Also watch for any back‑doors in the FPGA firmware. For now, just keep the old TLS working for your day‑to‑day traffic.
Never_smiles
Sounds good, keep the legacy TLS as a safety net. Just remember, if the lattice code runs in the dark and you never verify its timing, you’re just swapping one mystery for another.
Monero
Exactly, keep the fallback ready. Just don’t let a “dark” lattice implementation slip by; a single timing glitch can be the weak spot we all need to guard against.