NTRU - Resistance To Quantum-computer-based Attacks

Resistance To Quantum-computer-based Attacks

Unlike RSA or ECC, NTRU is currently not known to be vulnerable to quantum computer based attacks. A working, full-scale quantum computer running the process known as Shor's algorithm would be able to break RSA or ECC of any practical key size in negligible time. In contrast, there is no known quantum attack on NTRU that significantly reduces its security. The National Institute of Standards and Technology (NIST), wrote in a 2009 survey: "There are viable alternatives for both public key encryption and signatures that are not vulnerable to Shor’s Algorithm” and “Of the various lattice based cryptographic schemes that have been developed, the NTRU family of cryptographic algorithms appears to be the most practical...smallest key size...highest performance."