使其中有可欲者，虽锢南山犹有隙；

使其中亡可欲者，虽亡石椁，又何戚焉。

最近出来好几篇讨论量子通讯的文章，我觉得挺重要的。蔡庆宇和孙昌璞的文章从探测效率的角度出发，认为现有的量子密码传送达不到绝对安全性；徐令予的文章从破译成本的角度出发，认为即使量子计算机也无法攻克RSA密钥系统。徐老师的文章主要依靠专业文献（D. J. Bernstein, et. al., Post-quantum RSA）的结论。

这些文章严肃地质疑了量子通讯的必要性。

[转载]蔡庆宇 孙昌璞：从Bell不等式看当前量子密码安全性水平

http://blog.sciencenet.cn/blog-1319915-1083197.html  

[转载]徐令予：炒作量子通信工程，连潘建伟都担心

http://blog.sciencenet.cn/blog-1319915-1083199.html

Post-quantum RSA

https://eprint.iacr.org/2017/351

Daniel J. Bernstein and Nadia Heninger and Paul Lou and Luke Valenta

Abstract: This paper proposes RSA parameters for which (1) key generation, encryption, decryption, signing, and verification are feasible on today's computers while (2) all known attacks are infeasible, even assuming highly scalable quantum computers. As part of the performance analysis, this paper introduces a new algorithm to generate a batch of primes. As part of the attack analysis, this paper introduces a new quantum factorization algorithm that is often much faster than Shor's algorithm and much faster than pre-quantum factorization algorithms. Initial pqRSA implementation results are provided.