this post was submitted on 02 Aug 2026
6 points (60.0% liked)

Showerthoughts

43184 readers
134 users here now

A "Showerthought" is a simple term used to describe the thoughts that pop into your head while you're doing everyday things like taking a shower, driving, or just daydreaming. The most popular seem to be lighthearted clever little truths, hidden in daily life.

Here are some examples to inspire your own showerthoughts:

Rules

  1. All posts must be showerthoughts
  2. The entire showerthought must be in the title
  3. No politics
    • If your topic is in a grey area, please phrase it to emphasize the fascinating aspects, not the dramatic aspects. You can do this by avoiding overly politicized terms such as "capitalism" and "communism". If you must make comparisons, you can say something is different without saying something is better/worse.
    • A good place for politics is c/politicaldiscussion
  4. Posts must be original/unique
  5. Adhere to Lemmy's Code of Conduct and the TOS

If you made it this far, showerthoughts is accepting new mods. This community is generally tame so its not a lot of work, but having a few more mods would help reports get addressed a little sooner.

Whats it like to be a mod? Reports just show up as messages in your Lemmy inbox, and if a different mod has already addressed the report, the message goes away and you never worry about it.

founded 3 years ago
MODERATORS
 

The whole promise is that reversible computation is theoretically free (in quantum information theory) , quantum computer can exploit it by using quantum superposition to brute force 256bit key (and larger) in a single computation cycle.

There's a massive fundamental flaw in the reasoning behind this.

It's the second law of thermodynamics - entropy always increases. While computation is free, reversal of entropy isn't. What we're being promised is a 21st century version of perpetual motion machine.

Additional explanation:

Think about private key as low entropy, and public key as high entropy. Owner of the private key has cheat code in the form of missing information which allows reversing the entropy of public key.

However in order to break the cryptography you have to reverse public key back into private key without having access to it. The regualr way is to search for flaws in the cryptography scheme that allow reasoning about missing information and consecutively - private key recovery.

But if you do a brute force attack you are 100% forced to pay full thermodynamical price of reversing the entropy. And 2^256 is way, way more than you could ever afford. Even Planck scale values multiplied by that number grow into universe size and beyond.

In summary, quantum computing can skip time component of brute forcing a key, but it can't skip the energy costs. So it will never happen.

top 34 comments
sorted by: hot top controversial new old
[–] surewhynotlem@lemmy.world 21 points 5 days ago (1 children)

Your analogy is wrong.

Here's a silly example to highlight why.

Let's both stand together on the equator. You walk forward all the way around the earth and stop five feet behind me. You claim that it'll take me just as much energy to meet you there. But it doesn't, I just turn around and walk five feet.

Quantum computers, when when brute forcing, do it differently. They take a different path. That's why they're so much better at it.

[–] BlackLaZoR@lemmy.world -4 points 5 days ago (1 children)

I don't think I used any analogy at all. Point is, when you have to reduce entropy in one place you have to increase it elsewhere. There's no shortcut. It's thermodynamic 101

[–] surewhynotlem@lemmy.world 6 points 5 days ago

That's not the point. Literally doing anything increases entropy. That's called heat. And it has literally nothing to do with the efficiency of specific approach to breaking encryption.

[–] minty@aussie.zone 8 points 5 days ago* (last edited 5 days ago) (2 children)

With regards to extracting the private key from the public key, to my knowledge there is shors algorithm that runs in polynomial time on a quantum computer that solves integer factorisation.

Solve integer factorisation in P and you break RSA in P. I believe there are similar P algorithms that run on quantum computers for the discrete logarithm problem and elliptic curve discrete logarithm problem.

In this sense, if you scale quantum computers resources enough you break modern asymmetric cryptography.

With regards to breaking AES: Quantum computers halve the security. So 256 bit security goes to 128 bits. Still secure.

AES 128 goes to 64 bits of security. Hmmm maybe not secure anymore. Have a read of post quantum cryptography and shors algorithm to see what im on about

EDIT: added important details

Edit 2: so so many typos

[–] Natanael@infosec.pub 1 points 5 days ago

https://thequantuminsider.com/2026/04/21/cryptologist-finds-aes-128-likely-safe-from-quantum-attack/

That's different reasons why we should switch (larger blocks means better randomized modes), but quantum computers still needs to much energy and too much time to attack AES128 with Grover's algorithm

[–] BlackLaZoR@lemmy.world 1 points 5 days ago (1 children)

there is shors algorithm that runs in polynomial time on a quantum computer

I'm not claiming you can't do it faster. I'm claiming it's impossible to skip the related fundamental energy requirements.

[–] minty@aussie.zone 4 points 5 days ago (1 children)

Energy requirements scale exponentially on a polynomial time algorithm? That doesnt make sense. I admit however I have only studied quantum computers in relation to what they can do, not how. But I hope what I am saying makes sense.

[–] BlackLaZoR@lemmy.world -3 points 5 days ago (1 children)

I admit however I have only studied quantum computers in relation to what they can do, not how

I'm not an expert in quantum computing. The whole point of this thought experiment is to skip all all the mechanics and make an argument based on general fundamental thermodynamic limitations.

[–] Natanael@infosec.pub 4 points 5 days ago

Thermodynamics is derived from quantum physics. Quantum computing is derived from quantum physics. They are not bypassing the thermodynamic limitations. Instead the problems the researchers keep running into are related to noise.

[–] maxwellfire@lemmy.world 4 points 4 days ago* (last edited 4 days ago)

I think you're almost right about the high level principles, you've just forgotten that entropy scales as the log of the combinations not linearly.

So the entropy of a 128 bit key is not 2^128, it's just 128 and therefore the fundamental limit on the cost required to recover it that you're talking about is very small.

See landauer limit (which isn't quite the same thing since it's about irreversible computers which some quantum computers might not be, but gets at the idea of there being an energy cost to have information)

I believe the specifics of your thoughts about entropy of public vs private keys is also incorrect but not necessary to the core of what you're saying.

[–] kbal@fedia.io 6 points 5 days ago (1 children)

For most of us, thinking random thoughts about it while in the shower is probably not the most effective way to gain an understanding of the mathematical details of quantum mechanics.

[–] BlackLaZoR@lemmy.world -3 points 5 days ago (1 children)

I'm not interested in detail. The question is: Is my claim about thermodynamics valid. If it is, the inner workings of quantum computing are irrelevant.

[–] Pelicanen@fedia.io 4 points 4 days ago

Is your reasoning really "I'm not interested in understanding how it works, I'm just interested in being told I'm right"?

There are tons of videos explaining how quantum computing can breach traditional encryption, and there are a bunch of videos explaining how to make encryption that can't easily be breached by quantum computing.

[–] wrinkle2409@lemmy.cafe 5 points 5 days ago (1 children)

Why is a private key low entropy and a public one high entropy? Are you talking about Shanon entropy? If so, over what distribution?

Also, as far as I know from the time I was interested in QC, we already can break RSA, you can actually run it on actual quantum computers, although with fewer qubits. That's why we have quantum safe cryptography.

I really don't see how any of this violates the second law.

[–] BlackLaZoR@lemmy.world 0 points 5 days ago (3 children)

Public key must be high entropy as its sole purpose is to scramble known information, from perspective of a person who doesn't have a key, scrambled information is a pure random noise.

Private key has to be low entropy, since it has information necessary to revert scrambling. High entropy + information how to undo it isn't really high anymore.

Are you talking about Shanon entropy?

I'm not deep enough into physics to know what Shanon entropy is. I use definition of entropy as amount of hidden/unreadable information.

[–] Natanael@infosec.pub 4 points 5 days ago* (last edited 5 days ago)

If private keys were low entropy then you must be able to guess them randomly, but you can not.

Also, because they're mathematically linked and many algorithms has a 1:1 relationship between a given private key and public key (especially ECC) the entropy must necessarily be identical. You have a lot more to learn in information theory. The real trick is called trapdoor functions.

You're wrong about the entropy relationship because you don't understand the role of the description of the state space and the probability of a given configuration in that space.

[–] SwingingTheLamp@piefed.zip 3 points 5 days ago (1 children)

Shannon entropy is a concept from information theory. It is mathematically analogous to thermodynamic entropy, but not the same thing. So you've identified the Shannon entropy of public and private keys, but I'm also wondering how that relates to their thermodynamic entropy in order for the 2nd law to apply.

[–] Natanael@infosec.pub 1 points 5 days ago

Actually, it kinda is the same. The math between information entropy and physics entropy are identical and align when you describe physics in particular ways

But entropy in information theory does not behave the same way after a sequence of operations as entropy in physics, and that's because operations in information theory does not behave like physical interactions.

[–] wrinkle2409@lemmy.cafe 1 points 4 days ago

I'd say the roles are reversed. Entropy has to do with uncertainty or surprisal, it is hard to guess a private key than a public one, so I'd argue the private key has more entropy.

[–] BCsven@lemmy.ca 3 points 5 days ago (1 children)

The quantum vs current computing thermal needs are not linked directly to entropy. For current cryptography, solving faster is more energy by its linear relation nature, quantum is in parallel. It is possible quantum computing could be less wasteful in the future, but currently quantum computing is highly inefficient thermally.

And current computing can solve for the private key, just take a few days of heavy computing

[–] Natanael@infosec.pub 1 points 4 days ago (1 children)

a few days

A few trillion days lmao

[–] BCsven@lemmy.ca 0 points 4 days ago* (last edited 4 days ago) (1 children)

Nope. Current encryption. I'm not saying it computes the key backwards, but it somehow finds flaws or patterns that let's it make an accurate guesee.

Feed the public key samples into the llm, let it crunch, it will figure out the private keyi.

The more public samples you have the faster it finds the pattern between them.

HAWK 256 that was supposed to be post quantum has already been broken by CLAUDE https://www.anthropic.com/research/discovering-cryptographic-weaknesses

[–] Natanael@infosec.pub 1 points 4 days ago* (last edited 4 days ago)

That's a few weak asymmetric algorithms. Symmetric algorithms are absolutely out of reach. And I don't see advances against McEliece which has stood since the 80's.

[–] Assassassin@lemmy.dbzer0.com 2 points 5 days ago (1 children)

If your assertion were true, why would there be thousands of mathematicians focusing on building quantum safe encryption algorithms? You understand this situation better than scores of PhDs?

[–] BlackLaZoR@lemmy.world -1 points 5 days ago (1 children)

Good question. I have no answer to that. Maybe someone points a flaw in my reasoning...

[–] Assassassin@lemmy.dbzer0.com 1 points 5 days ago (1 children)

The flaw in your reasoning is that you're running under the assumption that quantum cracking uses the same amount of energy as conventional and that you have a higher level of understanding than people that are working on this professionally.

You're acting like you have some gotcha argument against billions of dollars of investment and a huge amount of institutional knowledge. If the problem was as simple as you're trying to make it, what would be the point of pouring so much time, money, and energy into developing quantum cryptography?

[–] cockmushroom@reddthat.com -3 points 5 days ago (1 children)

So, youhave nothing? Honestly disappointed.

[–] Assassassin@lemmy.dbzer0.com 1 points 5 days ago

Hey man, don't just jump in and try to capitalize off that guys hard earned trolling. That's fucked up

[–] Onomatopoeia@lemmy.cafe 2 points 5 days ago

It's relatively easy for modern consumer desktop hardware to crack old encryption in reasonable timeframes.

Time - that's the limiter. How long you're willing to wait for a solution.

If quantum computing can apply orders of magnitude greater performance than current systems, the same increase in cracking applies.

Not all encryption is equally complex - it's all about how long it takes. The end.

[–] waldfee@feddit.org 1 points 5 days ago (1 children)

Since quantum computers are using superconductiv materials, do their computations actually consume energy? Obviously their refrigeration uses a bunch of power, but not the chips themselves I think

[–] Natanael@infosec.pub 2 points 5 days ago

The setup and readout and reset process necessarily takes energy. And the cooling takes energy. And the post processing of the measured states takes energy. And because it's probabilistic you need to perform validation and re-run until you get a useful answer.

[–] PiraHxCx@lemmy.dbzer0.com 0 points 5 days ago (1 children)

Probably a really dumb question, but... it's been decades since plenty of sites and programs started blocking you for x amount of time if you enter the wrong password x amount of times... isn't there any security like that against brute-forcing passwords on servers or whatever the brute force runs against?

[–] jacksilver@lemmy.world 2 points 5 days ago

In most cases the real risk is someone getting access or intercepting the encrypted data. If they have the raw data, there aren't any other protections in place to prevent brute force attacks.

Similarly, that's why groups like the FBI will clone devices (like phones) to bypass brute force protections.

[–] Return_of_Chippy@lemmy.world 0 points 5 days ago

Have you considered control, alt and delete?