Let's Go Quantum
summary
Quantum vulnerability drives a concrete change: Go 1.23 adds a TLS key encapsulation mechanism that defaults to a hybrid x25519-Kyber768-draft00 cipher suite (enabled unless curve preferences are set, can be disabled with GODEBUG TLS_KYBER=z). The claim is that Kyber768 matches NIST's finalized security level, Go integrates an existing mlkem768 library, and hybrid use defends against the store-now-decrypt-later threat. Examples include a Go quantum simulator library for local testing and cloud access to real devices (IBM free tier ~127 qubits, 10 minutes).
AI-written summary · about
chapters (26)
- 0:00Introduction to Quantum
- 1:33Go 1.23 and NIST Standards
- 4:26Quantum computing concepts
- 6:33Superposition explained
- 8:35Qubits and measurement
- 11:30Quantum transformations
- 13:59Quantum logic gates
- 16:01Quantum entanglement
- 17:43Decoherence and error correction
- 19:01Hardware implementations
- 20:32Quantum software ecosystem
- 22:56Simulating quantum in Go
- 24:14Go simulation example
- 26:49Quantum algorithms
- 28:39Post-quantum cryptography
- 30:45PQC uptake and implications
- 33:49Store now decrypt later
- 35:10Key encapsulation mechanisms
- 37:44Lattice-based cryptography
- 40:55Hybrid encryption in TLS
- 44:38PQC in Go 1.23
- 46:14Internal implementation details
- 47:48PQC in Caddy
- 49:48Running a PQC server
- 51:05Finalizing NIST standards
- 52:46Future outlook and QA
related talks
29mThe Go Cryptography State of the Union
24mTaking the (Quantum) Leap with Go
05mLightning Talk: Building Quantum-Safe Applications
20mQuantum Resistant Native Go Programs
34mBeyond Classical Cryptography: Building Quantum-Resistant Cloud Native Infrastructure With SPIFFE
32mCybersecurity in Post Quantum Era
01h 05mChallenges and Opportunities from Quantum-Safe Cryptography
17mQuantum-Resistant Native Go Programs: Taking the Leap