Networks such as the Internet are essential for our connected world. Quantum computing threatens its fundamental security mechanisms. Therefore, a migration to post-quantum-cryptography (PQC) is necessary for networks and their components. Currently, there is little knowledge on how such migrations should be structured and implemented in practice. Our systematic literature review addresses migration approaches for IP networks towards PQC. It surveys papers about the migration process and exemplary real-world software system migrations. On the process side, we found that terminology, migration steps, and roles are not defined precisely or consistently across the literature. Still, we identified four major phases and appropriate substeps which we matched with also emerging archetypes of roles. In terms of real-world migrations, we see that reports used several different PQC implementations and hybrid solutions for migrations of systems belonging to a wide range of system types. Across all papers we noticed three major challenges for adopters: missing experience of PQC and a high realization effort, concerns about the security of the upcoming system, and finally, high complexity. Our findings indicate that recent standardization efforts already push quantum-safe networking forward. However, the literature is still not in consensus about definitions and best practices. Implementations are mostly experimental and not necessarily practical, leading to an overall chaotic situation. To better grasp this fast moving field of (applied) research, our systematic literature review provides a comprehensive overview of its current state and serves as a starting point for delving into the matter of PQC migration.
Networks such as the Internet are essential for our connected world. Quantum computing threatens its fundamental security mechanisms. Therefore, a migration to post-quantum-cryptography (PQC) is necessary for networks and their components. Currently, there is little knowledge on how such migrations should be structured and implemented in practice. Our systematic literature review addresses migration approaches for IP networks towards PQC. It surveys papers about the migration process and exemplary real-world software system migrations. On the process side, we found that terminology, migration steps, and roles are not defined precisely or consistently across the literature. Still, we identified four major phases and appropriate substeps which we matched with also emerging archetypes of roles. In terms of real-world migrations, we see that reports used several different PQC implementations and hybrid solutions for migrations of systems belonging to a wide range of system types. Across all papers we noticed three major challenges for adopters: missing experience of PQC and a high realization effort, concerns about the security of the upcoming system, and finally, high complexity. Our findings indicate that recent standardization efforts already push quantum-safe networking forward. However, the literature is still not in consensus about definitions and best practices. Implementations are mostly experimental and not necessarily practical, leading to an overall chaotic situation. To better grasp this fast moving field of (applied) research, our systematic literature review provides a comprehensive overview of its current state and serves as a starting point for delving into the matter of PQC migration.
The introduction of quantum computers is moving fast and one issue that should nt be overlooked is that they would be capable of breaking modern cryptographic systems easily. This scenario is likely to become real because with the help of Shor's algorithm they could break the only widely used public-key systems (e.g. RSA and ECC) which would mean that the security of internet communications,digital signaturesand sensitive stored data could be compromised. Even if post-quantum cryptography (PQC) is the right direction of development, there are many problems with it like low performance, complex implementation plans, complicated migration approaches and uncertain security eventually. This paper highlights the risk that quantum computers pose to current encryptions and gives an overview of the top PQC solutions that have been standardized by NIST. It also pinpoints the main problems that are still unsolved and offers practical strategies for mitigating the risk in this area. Based on an extensive review of literature and a computational experiment on hybrid key exchange, the article points out that hybrid approaches are the most efficient ones, cryptographic agility is necessary, and migration should be phased, these measures are aimed at making the transition to the post-quantum era safe and smooth.
With the constantly changing world of computers nowadays, the introduction of quantum computing has posed immense threats to the security of old and previous encryption algorithms. Post-Quantum Cryptography or PQC refers to a new generation of algorithms specifically created to resist the intense quantum computer attacks and offer secure and long-lasting protection to digital communications. As the potential of quantum technology becomes increasingly evident, the pursuit of secure, future-proof cryptographic solutions has never been more critical. This systematic review explores different PQC solutions for their strengths, weaknesses, and challenges of implementation. provides a comprehensive analysis of key studies on quantum-resistant algorithms, migration strategies and examines cryptographic security measures to present a complete picture of the latest advancements in quantum-safe cryptography. In this systematic paper, different PQC algorithms such as lattice, hash, code, multivariate and isogeny are reviewed along with their advantages and disadvantages. It also discusses how such findings will affect the security of real world communication, digital signatures, as well as blockchain security. This ensures how important it is to establish standardized PQC protocols for overall data security. This paper concludes with what future research directions and practical considerations relate to the adoption of PQC in critical infrastructures.
Post-quantum cryptography (PQC) provides the essential cryptographic algorithms needed to secure digital networking systems against future adversaries equipped with quantum computing. This paper reviews the PQC research landscape and identifies open challenges and future directions for the critical transition to PQC in digital networking systems. Building on the NIST standardization process which has hardened the PQC cipher algorithm security, this paper analyzes and describes the recent research on PQC implementations and integrations into scalable and standardized networking systems (Internet, web and cellular networks). We review research on the security, side-channel threats, performances, overheads, and compatibility of PQC ciphers. We also study the research incorporating PQC into the standardized web and cellular networking protocols, ranging from testing the PQC feasibility to proposing protocol solutions and mechanisms to enable PQC. Our study highlights the PQC challenge of large parameter sizes, common across the PQC cipher algorithms, and the research proposing protocol- and system-level mechanisms to address them. Informed by the survey, this paper identifies and highlights the research gaps and future directions to facilitate further research and development for PQC and to secure next-generation digital networking systems.
Post-quantum cryptography (PQC) migration is moving from algorithm design to organisational practice, yet the evidence that should guide migration tools is scattered across process studies, performance experiments, agility surveys and risk models. This paper presents a structured review guided by three research questions: what migration process is supported by the literature, what is known about the performance cost of the new algorithms, and what is missing for automated migration support. Eleven sources were analysed in depth, including recent IEEE Access papers and related surveys, experiments and guidance documents. The review finds that process terminology is still inconsistent, that performance evidence is mostly laboratory-based and per algorithm, that crypto-agility and risk scoring remain largely conceptual, and that cryptographic inventory is the prerequisite for everything else. These findings are converted into seven traceable requirements, which shape a seven-layer architecture for a Quantum-Ready Encryption Migration Assistant mapped to a four-phase migration process. A validation protocol with hypotheses, metrics, baselines and threats to validity is specified so that the assistant can be evaluated in future work. The architecture is conceptual and no experimental results are claimed.
Post-quantum cryptography (PQC) migration is moving from algorithm design to organisational practice, yet the evidence that should guide migration tools is scattered across process studies, performance experiments, agility surveys and risk models. This paper presents a structured review guided by three research questions: what migration process is supported by the literature, what is known about the performance cost of the new algorithms, and what is missing for automated migration support. Eleven sources were analysed in depth, including recent IEEE Access papers and related surveys, experiments and guidance documents. The review finds that process terminology is still inconsistent, that performance evidence is mostly laboratory-based and per algorithm, that crypto-agility and risk scoring remain largely conceptual, and that cryptographic inventory is the prerequisite for everything else. These findings are converted into seven traceable requirements, which shape a seven-layer architecture for a Quantum-Ready Encryption Migration Assistant mapped to a four-phase migration process. A validation protocol with hypotheses, metrics, baselines and threats to validity is specified so that the assistant can be evaluated in future work. The architecture is conceptual and no experimental results are claimed.
Post-Quantum Cryptography (PQC) is a rapidly developing field that addresses the potential threat quantum computers pose to the security of current cryptographic algorithms. With the rapid advancement of quantum computing technologies, it has become imperative to identify and standardize new cryptographic techniques that can withstand attacks from quantum computers. This paper explores the motivation behind PQC and provides an overview of the experimental research conducted in the field. It highlights the vulnerabilities of traditional cryptographic algorithms, such as RSA and ECC, to quantum attacks and emphasizes the need for transitioning to quantum-resistant alternatives. The experiments conducted in the PQC domain encompass the evaluation and analysis of candidate algorithms submitted to the NIST PQC competition. These experiments involve comprehensive security assessments, performance evaluations, and code audits to ensure the suitability and effectiveness of the proposed algorithms in real-world scenarios. This paper provides guidelines for organizations and practitioners adopting PQC. It discusses considerations for selecting and implementing post-quantum cryptographic algorithms, including security levels, algorithmic characteristics, performance tradeoffs, and integration challenges. It also outlines the importance of a smooth transition from classical to post-quantum cryptographic systems and highlights the need for standardization efforts to ensure interoperability and compatibility.