TutaCrypt, post-quantum encryption protocols for securing emails [pdf]

Hacker News

Hi HN, we are the developers from Tuta (formerly Tutanota), the German end-to-end encrypted email provider, and we recently released the world's first post-quantum encryption for email. We have included a full technical write-up of the cryptography involved in these changes and we have released it for open public review. This document specifies TutaCrypt, a protocol designed for hybrid email encryption in Tuta Mail. The protocol combines a classical Elliptic-Curve-Diffie-Hellman key exchange with a post-quantum KEM. The goal is to replace the usage of RSA in Tuta Mail. In the remainder of this document we describe some preliminaries such as the cryptographic primitives used. We define the core algorithms of the protocol and describe the flow of messages between the communicating parties. Finally, we discuss the security properties and some limitations of the protocol in its current form. We are eager for your constructive feedback. All cryptography related source code is available for review and experimenting here: https://github.com/tutao/tutanota/blob/master/src/api/worker... If you have any questions or comments related to post-quantum cryptography please let us know in the comments!

Visit product View on Hacker NewsMar 18, 2024

Share card

Actual performance

15points

8comments

Made the leaderboard

Launch Intel predictions

Analyze your own launch →

Product HuntOn track for Day 1 leaderboard · Strong signals: email, code, open · Missing: mac, agents, macos

69%69% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

42%42% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Hacker NewsMay not resonate with HN audience · Strong signals: ide, io · Missing: https docs, excited, just released

41%41% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal

37%37% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

Indie HackersIH features products with proven revenue · Missing: supports, reddit linkedin, podcasting

32%32% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

14%14% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Strong signals: crypto · Missing: web3, chat, cryptocurrency

2%2% predicted probability of success on BetaList, based on ML models trained on real launch data.

Incorrect prediction on native model

Similar products

Encyfr – post-quantum encryption for all21%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Encyfr – post-quantum encryption for all

Hacker News1

Phantom Chat33%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

iOS messenger with NIST post-quantum encryption

Indie Hackers1communication

DragBin39%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Store, share and manage files with post quantum encryption

Indie Hackerscommitment-full-time

KyberLock – Crystals-Kyber Post-Quantum Cryptography in the Browser34%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

KyberLock – Crystals-Kyber Post-Quantum Cryptography in the Browser

Hacker News3

Moochacha, quantum-safe file encryption (analyzed by Frama-C)35%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Moochacha, quantum-safe file encryption (analyzed by Frama-C)

Hacker News75

Zip It – Encryption Anywhere45%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Zip It – Encryption Anywhere

Hacker News10

Additive Homomorphic Encryption on Ethereum50%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Additive Homomorphic Encryption on Ethereum

Hacker News1

RSME:A Reactive Stability Mutation Encryption47%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

RSME:A Reactive Stability Mutation Encryption

Hacker News1

Serket – A gem for distributed encryption50%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Serket – A gem for distributed encryption

Hacker News1

Q-

Q-SSP – Quantum-Entropy Sanitization (7.997 bits/byte)51%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Q-SSP – Quantum-Entropy Sanitization (7.997 bits/byte)

Hacker News1

Browse all products Analyze your launch