Dagstuhl Seminar 25431
Quantum Cryptanalysis
( Oct 19 – Oct 24, 2025 )
Permalink
Organizers
- Gorjan Alagic (University of Maryland - College Park, US)
- Simona Etinski (CWI - Amsterdam, NL)
- Stacey Jeffery (CWI - Amsterdam, NL)
- Rainer Steinwandt (University of Alabama in Huntsville, US)
Contact
- Marsha Kleinbauer (for scientific matters)
- Jutka Gasiorowski (for administrative matters)
Located at the crossroad between quantum computing and cryptography, quantum cryptanalysis is the study of quantum attacks against cryptographic solutions. This is the eighth in a series of Dagstuhl Seminars on quantum cryptanalysis, focusing on algorithmic insights, as well as software tools, that support the quantum cryptanalyst. Given the relative stability of symmetric cryptosystems against quantum attacks, we plan to emphasize asymmetric cryptography in the 2025 edition of the seminar. (Note that it is not necessary to have attended previous editions to be able to fully be a part of the seminar.) We are especially interested in the quantum-resistance of asymmetric cryptographic solutions that are deployed, standardized, or considered for standardization. We welcome quantum cryptanalytic research on all established platforms, including isogenies and multivariate polynomials. However, given the emphasis of current standardization efforts, we expect the most impactful areas to be cryptanalysis of lattice-based and code-based designs as used in digital signature schemes and key encapsulation mechanisms. Accordingly, we currently anticipate two core themes for this Dagstuhl Seminar:
- Quantum-algorithmic innovations to attack various cryptographic building blocks, with an emphasis on lattice-based and code-based constructions; and
- Quantum resource estimation for attacks against deployed traditional and post-quantum cryptosystems.
In view of the fast-paced research in quantum cryptanalysis and to make effective use of the opportunities that Schloss Dagstuhl offers, we plan to determine the exact technical foci 2-3 months before the seminar based on feedback from the seminar participants, taking into account recent research developments. We plan for a small number of working groups that can spend a substantial part of the week on a specific problem domain within quantum cryptanalysis. The seminar schedule will also ensure regular exchange among the different working groups over the course of the week, and we plan to incorporate some introductory presentations that enable junior researchers to effectively collaborate with senior researchers in the working groups.
Currently anticipated focus areas include attacking lattice-based and code-based constructions, but participants may opt for alternate topics. A key goal is to maintain a strong seminar character, and not be confined to traditional presentations of completed results. As in prior editions, this seminar aims to bring together researchers from academia, government, and industry, including experts from quantum computing and experts in classical cryptography, as well as members of the new generation of native quantum cryptanalysts who are fluent in both disciplines.
Related Seminars
- Dagstuhl Seminar 11381: Quantum Cryptanalysis (2011-09-18 - 2011-09-23) (Details)
- Dagstuhl Seminar 13371: Quantum Cryptanalysis (2013-09-08 - 2013-09-13) (Details)
- Dagstuhl Seminar 15371: Quantum Cryptanalysis (2015-09-06 - 2015-09-11) (Details)
- Dagstuhl Seminar 17401: Quantum Cryptanalysis (2017-10-01 - 2017-10-06) (Details)
- Dagstuhl Seminar 19421: Quantum Cryptanalysis (2019-10-13 - 2019-10-18) (Details)
- Dagstuhl Seminar 21421: Quantum Cryptanalysis (2021-10-17 - 2021-10-22) (Details)
- Dagstuhl Seminar 23421: Quantum Cryptanalysis (2023-10-15 - 2023-10-20) (Details)
Classification
- Cryptography and Security
- Data Structures and Algorithms
Keywords
- cryptanalysis
- post-quantum cryptography
- quantum algorithms
- quantum resource estimation
- computational algebra