In a short number of years, the National Institute of Standards and Technology (NIST) will standardize a small set of public-key algorithms designed to be resilient to quantum attacks. But will they be?



They are designed to resist the known quantum attacks, but can other quantum algorithmic tools be applied in novel ways to break the algorithms using the proposed parameters? Can new quantum algorithms break them?



The aim of this workshop is to bring quantum algorithms experts together with experts in post-quantum cryptography to develop and explore potential avenues for quantum attacks on these schemes and/or to build greater confidence that such attacks do not exist.

This workshop is part of both the Quantum Wave in Computing program and the Lattices: Algorithms, Complexity, and Cryptography program.

In a short number of years, the National Institute of Standards and Technology (NIST) will standardize a small set of public-key algorithms designed to be resilient to quantum attacks. But will they be?



They are designed to resist the known quantum attacks, but can other quantum algorithmic tools be applied in novel ways to break the algorithms using the proposed parameters? Can new quantum algorithms break them?



The aim of this workshop is to bring quantum algorithms experts together with experts in post-quantum cryptography to develop and explore potential avenues for quantum attacks on these schemes and/or to build greater confidence that such attacks do not exist.

This workshop is part of both the Quantum Wave in Computing program and the Lattices: Algorithms, Complexity, and Cryptography program.

In a short number of years, the National Institute of Standards and Technology (NIST) will standardize a small set of public-key algorithms designed to be resilient to quantum attacks. But will they be?



They are designed to resist the known quantum attacks, but can other quantum algorithmic tools be applied in novel ways to break the algorithms using the proposed parameters? Can new quantum algorithms break them?



The aim of this workshop is to bring quantum algorithms experts together with experts in post-quantum cryptography to develop and explore potential avenues for quantum attacks on these schemes and/or to build greater confidence that such attacks do not exist.

This workshop is part of both the Quantum Wave in Computing program and the Lattices: Algorithms, Complexity, and Cryptography program.

In a short number of years, the National Institute of Standards and Technology (NIST) will standardize a small set of public-key algorithms designed to be resilient to quantum attacks. But will they be?



They are designed to resist the known quantum attacks, but can other quantum algorithmic tools be applied in novel ways to break the algorithms using the proposed parameters? Can new quantum algorithms break them?



The aim of this workshop is to bring quantum algorithms experts together with experts in post-quantum cryptography to develop and explore potential avenues for quantum attacks on these schemes and/or to build greater confidence that such attacks do not exist.

This workshop is part of both the Quantum Wave in Computing program and the Lattices: Algorithms, Complexity, and Cryptography program.

In a short number of years, the National Institute of Standards and Technology (NIST) will standardize a small set of public-key algorithms designed to be resilient to quantum attacks. But will they be?



They are designed to resist the known quantum attacks, but can other quantum algorithmic tools be applied in novel ways to break the algorithms using the proposed parameters? Can new quantum algorithms break them?



The aim of this workshop is to bring quantum algorithms experts together with experts in post-quantum cryptography to develop and explore potential avenues for quantum attacks on these schemes and/or to build greater confidence that such attacks do not exist.

This workshop is part of both the Quantum Wave in Computing program and the Lattices: Algorithms, Complexity, and Cryptography program.

In a short number of years, the National Institute of Standards and Technology (NIST) will standardize a small set of public-key algorithms designed to be resilient to quantum attacks. But will they be?



They are designed to resist the known quantum attacks, but can other quantum algorithmic tools be applied in novel ways to break the algorithms using the proposed parameters? Can new quantum algorithms break them?



The aim of this workshop is to bring quantum algorithms experts together with experts in post-quantum cryptography to develop and explore potential avenues for quantum attacks on these schemes and/or to build greater confidence that such attacks do not exist.

This workshop is part of both the Quantum Wave in Computing program and the Lattices: Algorithms, Complexity, and Cryptography program.

In a short number of years, the National Institute of Standards and Technology (NIST) will standardize a small set of public-key algorithms designed to be resilient to quantum attacks. But will they be?



They are designed to resist the known quantum attacks, but can other quantum algorithmic tools be applied in novel ways to break the algorithms using the proposed parameters? Can new quantum algorithms break them?



The aim of this workshop is to bring quantum algorithms experts together with experts in post-quantum cryptography to develop and explore potential avenues for quantum attacks on these schemes and/or to build greater confidence that such attacks do not exist.

This workshop is part of both the Quantum Wave in Computing program and the Lattices: Algorithms, Complexity, and Cryptography program.

This workshop will explore fundamental questions in quantum algorithms. What are the most promising avenues for novel quantum speed-ups: are they in quantum simulation, in quantum machine learning, in new algorithms for post-quantum crypto, in algorithms for quantum learning or testing? And what are the prospects for concrete speed-ups on near-term devices: what are the relevant cost models, which architectures are more noise-tolerant?

This workshop will explore fundamental questions in quantum algorithms. What are the most promising avenues for novel quantum speed-ups: are they in quantum simulation, in quantum machine learning, in new algorithms for post-quantum crypto, in algorithms for quantum learning or testing? And what are the prospects for concrete speed-ups on near-term devices: what are the relevant cost models, which architectures are more noise-tolerant?

This workshop will explore fundamental questions in quantum algorithms. What are the most promising avenues for novel quantum speed-ups: are they in quantum simulation, in quantum machine learning, in new algorithms for post-quantum crypto, in algorithms for quantum learning or testing? And what are the prospects for concrete speed-ups on near-term devices: what are the relevant cost models, which architectures are more noise-tolerant?