Just in time for 10 years of Tuta/Tutanota, we are launching the most significant security upgrade of Tuta Mail with TutaCrypt. This groundbreaking post-quantum encryption protocol will secure emails with a hybrid protocol combining state-of-the-art quantum-safe algorithms with traditional algorithms (AES/ECC) making Tuta Mail the world’s first email provider that can protect emails from quantum computer attacks.
Quite a lot of cryptography detail in their blog post, not all of which do I understand. Curious to find out what the community thinks of this …
For instance:
I know Bruce Schneier says rolling your own Crypto is hard and most will get it wrong. So is it concerning that they made their own encryption protocol?
So, are they putting a piece of cardboard in front of a bullet-resistant door?
🤔
It sounds like they’re just encrypting it twice (once with each algorithm), but I could be wrong.