RSA-PSS – Provably secure RSA Signatures and their ...

are more likely to consider the use of elliptic curve cryptography. When consideringthe future of public key cryptography in the long term, we will probablysee another topic raising within the next years: The requirement to have algorithmsresistant to quantum computers. Neither PSS nor elliptic curves (noranything else deployed today) provides anything here, so in the long run we willprobably see completely new public key algorithms developed.What stays is the general idea of provable security. While it is far frombeing realistic to see any system that is fully provably secure, it seems to be areasonable approach to provide provable security in parts of systems where it ispossible. When we cannot prove the security of a full system, we can at leasttry to prove parts of the system and show if the complexity of systems relies onwell-known and understood problems. Also, we saw that the PSS constructionprovides more robustness against flaws in the implementation. It seems reasonableto follow that approach further and investigate algorithm designs that areless likely to be implemented with security flaws.49