NATO science for peace and security series. D, Information and communication security

Post-Quantum Cryptography Migration: Challenges in Education

Tomáš Fabšič, Otokar Grošek, Viliam Hromada, Pavol Zajac

Published Feb 19, 2024• 0 citations

Abstract

PQC migration represents multiple challenges in education. We will need to educate our future cryptography researchers and engineers on new topics, introduce new challenges, and explain new cryptographic primitives. In the paper, we present our view on education challenges associated with the transition to post-quantum cryptography.

DOI: 10.3233/nicsp240003

Related papers

Illuminating the Path of Post-Quantum Cryptographic Protocols: A Survey of some Recent Literatures

Alvary Kefas Kwala, Alpna Mishra, Shri Kant

Abstract The imminent threat posed by quantum computers to modern public key cryptography has spurred the development of post-quantum cryptography (PQC) algorithms. Over the last two decades, the field of PQC research has thrived, yielding a diverse range of algorithms resilient against quantum attacks. These PQC algorithms are undergoing selection and standardization by prominent bodies ; such as National Institute of Standards and Technology (NIST). However, the challenge remains substantial, given the monumental task of migrating numerous new devices to PQC algorithms. This complex, multi-decade transition from classical cryptography to PQC, necessitates careful survey of research articles to consider the current post quantum cryptographic schemes, and key protective strategies against quantum threats, implementation feasibility, compliance and challenges of implementations. This will provide insight and future directions for new researchers and organizations. .

Nov 6, 20230 citations

Post-Quantum Cryptography: An Introductory Overview and Implementation Challenges of Quantum-Resistant Algorithms

Sherdel A. Käppler, Bettina Schneider

Cryptographic algorithms are an essential measure to ensure confidentiality and integrity of internet communication. The development of quantum computers (QCs) and their potential to utilize Shor’s Law, is increasingly recognized as a threat to asymmetric cryptography. In response, post-quantum cryptography (PQC) is gaining prominence as a notable field of research aiming to standardize quantum resistant algorithms before the operational usage of QCs. This paper is addressed to people with preliminary knowledge in the field of cryptography and QC. Based on a literature review, the authors provide an overview of challenges faced by the research community and elaborate the advancements in addressing post-quantum threats. A migration strategy from classical cryptosystems to PQC systems is in development, but obstacles such as time constraints and improper implementation complicate the process. Full implementation could take a decade or more. Until then, our paper aims to create awareness for potential challenges when transitioning towards PQC. As categorization scheme for these potential obstacles, we refer to a well- established model in cybersecurity – the McCumber Cube. Conclusions embrace preparing for risks of improper implementation and deriving a multi-step migration. Special attention is expected to be needed for data migration of existing data sets. As a request for future research in PQC, the authors identified the process of implementing post-cryptography standards, e.g., from the National Institute of Standards and Technology (NIST), and an assessment of the perceived readiness of industry to adapt.

EPiC series in computingJun 20, 202224 citations

Cryptographic Challenges and Security in Post Quantum Cryptography Migration: A Prospective Approach

Anoop Kumar Pandey, Aashish Banati, Balaji Rajendran +2 more

Post-Quantum Cryptography (PQC) is a rapidly developing field that addresses the potential threat quantum computers pose to the security of current cryptographic algorithms. With the rapid advancement of quantum computing technologies, it has become imperative to identify and standardize new cryptographic techniques that can withstand attacks from quantum computers. This paper explores the motivation behind PQC and provides an overview of the experimental research conducted in the field. It highlights the vulnerabilities of traditional cryptographic algorithms, such as RSA and ECC, to quantum attacks and emphasizes the need for transitioning to quantum-resistant alternatives. The experiments conducted in the PQC domain encompass the evaluation and analysis of candidate algorithms submitted to the NIST PQC competition. These experiments involve comprehensive security assessments, performance evaluations, and code audits to ensure the suitability and effectiveness of the proposed algorithms in real-world scenarios. This paper provides guidelines for organizations and practitioners adopting PQC. It discusses considerations for selecting and implementing post-quantum cryptographic algorithms, including security levels, algorithmic characteristics, performance tradeoffs, and integration challenges. It also outlines the importance of a smooth transition from classical to post-quantum cryptographic systems and highlights the need for standardization efforts to ensure interoperability and compatibility.

IEEE International Conference on Public Key Infrastructure and its Applications (PKIA)Sep 8, 202315 citations

Migrating Applications to Post-Quantum Cryptography: Beyond Algorithm Replacement

Alexandre Augusto Giron

Post-Quantum Cryptography (PQC) defines cryptographic algorithms designed to resist the advent of the quan-tum computer. Most public-key cryptosystems today are vulnerable to quantum attackers, so a global-scaletransition to PQC is expected. As a result, several entities foment efforts in PQC standardization, research,development, creation of Work Groups (WGs), and issuing adoption recommendations. However, there isa long road to broad PQC adoption in practice. This position paper motivates ongoing and future researchon this topic. It describes why migrating to PQC is necessary and gathers evidence that the “hybrid mode”can help the migration process. Finally, it stresses that there are risks yet to be considered by the literature.Quantum-safe protocols are being evaluated, but more attention (and awareness) is needed for the softwareand protocols at the application layer. Lastly, this position paper gives further recommendations for a smotherPQC migration

International Conference on Security and CryptographyJan 1, 20238 citations

Identifying Obstacles of PQC Migration in E-Estonia

Jelizaveta Vakarjuk, Nikita Snetkov, Peeter Laud

With the development of quantum technologies, there is an urgent need to secure existing IT infrastructure against quantum threats. Introducing post-quantum cryptography (PQC) to existing systems may protect them against future quantum computer attacks. Still, post-quantum migration is a cumbersome process that requires systematic planning and takes years. In this paper, we study Estonia's e-government ecosystem, outline systems and products that rely on potentially vulnerable cryptographic primitives, identify the main migration obstacles, and provide recommendations on how the migration process should be carried out.

International Conference on Cyber ConflictMay 28, 20245 citations

Post-Quantum Cryptography: Current Developments, Challenges, and Future Directions

Wiliam Fernando

Quantum computing poses a significant threat to existing cryptosystems, as Shor's and Grover's algorithms efficiently solve the underlying mathematical problems of classical cryptographic algorithms. Post-Quantum Cryptography (PQC) provides a proactive response to this emerging threat, enabling resilience against quantum attacks. Researchers have extensively explored various mathematical structures believed to be resilient against quantum attacks across several PQC families. The NIST PQC standardisation project demonstrates the global need to integrate PQC into existing digital systems, even before the quantum era. Practical use cases of PQC schemes in various areas, along with the associated challenges, have been thoroughly studied to understand future research directions that must be followed for the better optimisation of real-world PQC implementation in a quantum-safe future.

Path of ScienceJun 30, 20252 citations