In the paper problems and risks for classical systems in the field of cryptographic protection of information in connection with the development of quantum computing are formulated. Problems the need to finding new solutions are grounded. The paper includes analysis of requirements of two major organizations NIST and ETSI. There are security models for cryptographic primitives offered in terms of post quantum cryptography.
In the paper problems and risks for classical systems in the field of cryptographic protection of information in connection with the development of quantum computing are formulated. Problems the need to finding new solutions are grounded. The paper includes analysis of requirements of two major organizations NIST and ETSI. There are security models for cryptographic primitives offered in terms of post quantum cryptography.
The development of quantum computers is one of the most significant technological developments of our time, opening new horizons in computing capabilities. However, it also poses serious threats to existing cryptographic algorithms, which are the basis of the security of modern information systems. The paper presents the results of research on post-quantum cryptography and its role in ensuring information security in the context of the development of quantum computers. The purpose of this paper is to compare modern post-quantum, i.e., quantum-stable cryptographic algorithms, assess their applicability for different classes of tasks, and predict the development paths of cryptographic methods for information protection. To achieve this goal, methods of comparative analysis and mathematical modeling are used, which allow for assessing the effectiveness and security of algorithms in different conditions. The study results show that post-quantum algorithms provide reliable information protection in the context of potential quantum attacks while maintaining a high-efficiency level. The conclusions emphasize the need to adapt existing cryptographic systems to new security requirements, particularly through integrating post-quantum algorithms into cloud services and blockchain technologies. The research results can be used to improve data protection mechanisms in information systems and to develop new cryptographic standards in the era of quantum computing. Therefore, plans for future research are outlined, namely: the effectiveness of implementing post-quantum algorithms in various industries, including finance, medicine, and government, will be analyzed; methods for optimizing cryptographic systems will be developed to ensure a balance between security and performance; new mathematical approaches will be studied that can be used to create quantum-resistant algorithms.
Abstract. In the digital age, cryptography is widely used in various important systems such as financial, military and government ones, medical records etc. The life of modern people is closely connected with the cryptography. We send messages via instant messengers without even considering in which way the security of communications and data is ensured. We buy things both online and transfer money with confidence in transaction security. The level of digitization of our society is constantly increasing, and the digital data needs a reliable protection, which makes cryptography a current topic. Cryptographic systems ensure our security and the basic properties of information, such as privacy, integrity, availability. However, with the beginning of the development of quantum computers, the field of cryptography has developed in a new direction. Quantum cryptography is a science that studies the methods of communication systems protection. It is based on the idea that patterns of quantum physics (physical properties described by the laws of quantum optics, quantum electrodynamics, or quantum field theory) are inviolable. The current state of development and usage of powerful quantum computers, as well as their mathematical and software, is strictly confidential and securely protected. Only clear-cut information about quantum computers and their usage in cryptography is provided. NIST has announced an open competition to select quantum-resistant public-key cryptographic algorithms. After the third round, CRYSTALS-KYBER, CRYSTALS Dilithium, FALCON, and SPHINCS+ were proposed to be standardized. NIST has already recommended moving from the sizes of keys and algorithms that provide 80 security bits to the sizes of keys and algorithms that provide 112 or 128 security bits in order to protect against classic attacks. Post-quantum cryptography, which with its complexities still requires a more detailed study, challenge science once more. However, it is unknown when the changes will occur and when the quantum era will begin, as well as what consequences they will have. It is only possible to predict how many advantages will have quantum calculations compared to usual, and how different the new quantum models will be from classic ones.
Post-quantum cryptography is one of the key areas of development of modern means of information protection inconnection with the active progress of quantum technologies. Classical cryptographic algorithms, such as RSA and ECC,become vulnerable due to the Shor algorithm, which threatens the long-term security of information systems. The articleprovides an in-depth review of the current state of post-quantum cryptographic algorithms based on the results of the NationalInstitute of Standards and Technology (NIST) selection, and also analyzes the approaches proposed in recent scientificpublications. The characteristics of the Kyber, Dilithium, Falcon, and SPHINCS+ algorithms are considered in detail - theirsecurity parameters, performance, cryptographic strength, requirements for hardware resources, and possibilities of applicationin practical systems. Special attention is paid to the issues of integrating post-quantum algorithms into existing cryptographicprotocols, in particular, into public-key systems, public-key infrastructure, and secure communication channels. The keyproblems of implementing post-quantum cryptography in information infrastructures are considered, including: increased keysizes and cryptographic parameters, computational delays, compatibility with existing software and hardware solutions, and theneed to revise key management policies. The prospects for implementing post-quantum solutions in Ukraine are separatelyanalyzed, and practical recommendations are offered for a phased migration to such algorithms for state and corporate systems,taking into account the requirements for long-term data confidentiality and protection of critical information infrastructure.Keywords: post-quantum cryptography, quantum attacks, NIST PQC, Kyber, Dilithium, Falcon, SPHINCS+,cryptoresistance. References1. NIST. (n.d.). Post-Quantum Cryptography Standardization Project. https://csrc.nist.gov/projects/postquantum-cryptography.2. NIST. (2024). NIST releases first 3 finalized post-quantum encryption standards. https://www.nist.gov/newsevents.3. Dam, D. T., Mavroeidis, V., & Vishi, K. (2023). A survey of post-quantum cryptography: Start of a newquantum era. Cryptography, 7(3). https://doi.org/10.3390/cryptography7030040.4. Kokare, Priyanka & Vora, Deepali & Patil, Shruti & Kotecha, Ketan & Khairnar, Vaishali & Choudhury,Tanupriya & Kulkarni, Ambarish. (2024). Post Quantum Cryptography: A survey of Past and Future.https://www.researchgate.net/publication/382398375_Post_Quantum_Cryptography_A_survey_of_Past_and_Future.5. Chen, L., Jordan, S., Liu, Y.-K., Moody, D., Peralta, R., Perlner, R., Smith-Tone, D. (2016). Report on PostQuantum Cryptography. NIST IR 8105. https://doi.org/10.6028/NIST.IR.8105.6. Bos, J. W., et al. (2017). CRYSTALS-Kyber: A CCA-Secure Module-Lattice-Based KEM. https://pqcrystals.org/kyber/data/kyber-specification-round3.pdf.7. Ducas, L., et al. (2018). CRYSTALS-Dilithium: Digital Signatures from Module Lattices. https://pqcrystals.org/dilithium/data/dilithium-specification-round3.pdf.8. Pöppelmann, T., Oder, T., & Güneysu, T. (2015). High-Speed Ideal Lattice-Based Cryptography on 8-bit AVRMicrocontrollers. IACR Cryptology ePrint Archive, Report 2015/382. https://eprint.iacr.org/2015/382.pdf.9. Cloudflare. (2023). Post-Quantum Cryptography Support in TLS and Web Infrastructure.https://blog.cloudflare.com/tag/post-quantum-cryptography/.10. ETSI. (2020). Quantum-Safe Cryptography – An Overview. https://www.etsi.org/technologies/quantum-safecryptography.11. NCSC UK. (2020). Preparing for Quantum-Safe Cryptography. https://www.ncsc.gov.uk/whitepaper/preparing-for-quantum-safe-cryptography.12. Keyfactor & Ponemon Institute. (2023). State of Machine Identity Management Report. Keyfactor, Inc.https://www.keyfactor.com.13. Shor, P. (1994). Algorithms for quantum computation: Discrete logarithms and factoring. Proceedings of the35th Annual Symposium on Foundations of Computer Science.14. Bernstein, D., & Lange, T. (2017). Post-Quantum Cryptography. Springer. https://doi.org/10.1007/978-3-540-88702-7.15. Grover, L. (1996). A fast quantum mechanical algorithm for database search. STOC '96.https://doi.org/10.1145/237814.237866.16. Mosca, M. (2018). Cybersecurity in an era with quantum computers: Will we be ready? IEEE Security &Privacy, 16(5), 38–41. https://doi.org/10.1109/MSP.2018.3761723.17. Prest, T. (2020). Efficient implementation issues in Falcon. https://falcon-sign.info.18. SPHINCS+ Team. (n.d.). SPHINCS+ Specification. https://sphincs.org/data/sphincs+-specification.pdf.
Abstract It is viewed as revolutionary technology, offering incredible potential in terms of computing power within different scientific and industrial sectors. Quantum computers provide remarkable computing power; however, they also present significant security risks to existing public-key cryptography systems used to secure digital communication, online banking systems, government, medical applications, cloud computing systems, and IoT systems. Security of commonly used encryption schemes like RSA, DH, and ECC depends on mathematical problems that are impossible for classical computers to solve but can be easily resolved with the help of powerful enough quantum computers by using Shor’s algorithm. Furthermore, Grover’s algorithm makes exhaustive search attacks much faster, thus effectively lowering the security level of symmetric encryption schemes since it provides the speed-up for brute-force attacks. Post-Quantum Cryptography (PQC) turned out to be an effective and scalable method to protect digital data from attacks using quantum computing. In contrast to quantum cryptography, which requires a special quantum communication channel, PQC uses classical cryptographic algorithms that cannot be broken down by either classical or quantum computer due to certain mathematical problems. This research paper offers an extensive exploration of post-quantum cryptography through the analysis of the development of quantum computing, weaknesses of current cryptographic techniques, and mathematics behind quantum-resistant algorithms. Moreover, this paper explores the major classes of PQC techniques such as lattice-based, code-based, hash-based, multivariate, and isogeny-based cryptography and provides details about their security and application. Moreover, the report gives an overview of the NIST Post-Quantum Cryptography Standardization Project and analyzes recent standardizations of quantum-proof algorithms to be utilized in future digital infrastructures. Keywords: Post-Quantum Encryption, Quantum Security, Quantum-Proof Public-Key Cryptography, Lattice-Based Security Protocols, ML-KEM Key Encapsulation Mechanism, ML-DSA Digital Signature Algorithm, NIST Post-Quantum Cryptography, Contemporary Cybersecurity, Secure Communications, Cryptographic Algorithms.
The article investigates the problem of ensuring cryptographic stability of information and communication systems in the conditions of increasing intensity of cyber threats and development of quantum computing, which reduces the efficiency of classical cryptographic algorithms. An analysis of modern approaches to the application of post-quantum cryptographic algorithms was conducted, which showed their predominantly static nature of use without taking into account the dynamics of changes in the operating environment, risk level and attack parameters. The need to develop adaptive mechanisms for selecting cryptographic algorithms capable of providing an appropriate level of protection in conditions of changing threats was substantiated. A model for dynamic selection of post-quantum cryptographic algorithms based on an integral assessment of efficiency and risk is proposed, which allows taking into account both the technical characteristics of the algorithms (speed, cryptographic stability, resource intensity) and the current state of system security. An integral efficiency indicator and a risk function are introduced within the model, which are formed taking into account the level of vulnerabilities, threat intensity and criticality of information resources. An adaptation mechanism is implemented, which provides automatic review and selection of the optimal algorithm depending on the change in risk in real time. The results of the study indicate that the use of the proposed model creates the prerequisites for increasing the level of cryptographic protection, provides a formalized basis for adaptive management of the system's functioning, and allows for reasonable optimization of the use of computing resources. The results obtained confirm the scientific novelty and practical feasibility of implementing adaptive approaches to cryptographic protection of information and communication systems. Keywords: post-quantum cryptography, information and communication systems, cryptographic protection, integral risk assessment, adaptive model, dynamic algorithm selection, cybersecurity
Virtually all asymmetric cryptographic schemes currently in use are threatened by the potential development of powerful quantum computers. Although there is currently no definite answer and it is very unclear when or even if CRQC will ever be built and the gap between modern quantum computers and the envisioned CRQC is huge, the risk of creating CRQC means that currently deployed public key cryptography must be replaced by quantum-resistant ones alternatives. For example, information encrypted using modern public key cryptography can be recorded by cryptanalysts and then attacked if a QRQC can be created. The potential harm that CRQC could cause is the basis of the motivation to seek countermeasures, even though we have uncertainties about when and if these computers can be built. Deployed systems that use public key cryptography can also take years to update. Post-quantum cryptography is one way to combat quantum computer threats. Its security is based on the complexity of mathematical problems that are currently considered unsolvable efficiently – even with the help of quantum computers. Post-quantum cryptography deals with the development and research of asymmetric cryptosystems, which, according to current knowledge, cannot be broken even by powerful quantum computers. These methods are based on mathematical problems for the solution of which neither efficient classical algorithms nor efficient quantum algorithms are known today. Various approaches to the implementation of post-quantum cryptography are used in modern research, including: code-based cryptography, lattice-based cryptography, hashing-based cryptography, isogeny-based cryptography, and multidimensional cryptography. The purpose of this work is to review the computational model of quantum computers; quantum algorithms, which have the greatest impact on modern cryptography; the risk of creating cryptographically relevant quantum computers (CRQC); security of symmetric cryptography and public key cryptography in the presence of CRQC; NIST PQC standardization efforts; transition to quantum-resistant public-key cryptography; relevance, views and current state of development of quantum-resistant cryptography in the European Union. It also highlights the progress of the most important effort in the field: NIST's standardization of post-quantum cryptography.