International Journal of Computer Applications Technology and Research
Quantum-Resilient Infrastructure: Migrating US Financial Payment System to Post-Quantum Cryptography (PQC) Standards to Prevent 'Harvest Now, Decrypt Later' Attacks
The imminent advent of a Cryptographically Relevant Quantum Computer (CRQC) poses an existential threat to the US financial infrastructure.Current payment rails including FedWire, CHIPS, and ACH rely on RSA and ECC standards that are mathematically vulnerable to Shor's Algorithm.This facilitates "Harvest Now, Decrypt Later" (HNDL) attacks, where encrypted data is intercepted today for future decryption.This paper evaluates the migration to NIST-standardized Post-Quantum Cryptography (PQC), specifically ML-KEM and ML-DSA.We analyze the architectural challenges of integrati ng these primitives into ISO 20022 formats, focusing on the trade-offs between increased packet size and sub-millisecond latency requirements.By proposing a phased migration framework using Hybrid Cryptographic Wrappers, this research provides a roadmap for maintaining regulatory compliance under NSM-10 while preventing a systemic collapse of digital trust and the associated multitrillion-dollar risk to the US GDP.
The imminent advent of a Cryptographically Relevant Quantum Computer (CRQC) poses an existential threat to the US financial infrastructure.Current payment rails including FedWire, CHIPS, and ACH rely on RSA and ECC standards that are mathematically vulnerable to Shor's Algorithm.This facilitates "Harvest Now, Decrypt Later" (HNDL) attacks, where encrypted data is intercepted today for future decryption.This paper evaluates the migration to NIST-standardized Post-Quantum Cryptography (PQC), specifically ML-KEM and ML-DSA.We analyze the architectural challenges of integrati ng these primitives into ISO 20022 formats, focusing on the trade-offs between increased packet size and sub-millisecond latency requirements.By proposing a phased migration framework using Hybrid Cryptographic Wrappers, this research provides a roadmap for maintaining regulatory compliance under NSM-10 while preventing a systemic collapse of digital trust and the associated multitrillion-dollar risk to the US GDP.
As the era of quantum computing approaches, the fundamental cryptographic primitives securing global communications face a paradigm shift. With the National Institute of Standards and Technology (NIST) finalizing new standards, the industry must urgently address the vulnerabilities of legacy systems. The imminent advent of CRQCs (Cryptographically Relevant Quantum Computers) poses an existential threat to the Public Key Infrastructure (PKI) underpinning the global digital economy. Classical algorithms such as RSA and ECC (Elliptic Curve Cryptography) are vulnerable to polynomial-time cryptanalysis via Shor’s algorithm. This study investigates the HNDL (Harvest Now, Decrypt Later) threat model and evaluates the resilience of NIST-standardized PQC (Post-Quantum Cryptography) algorithms: ML-KEM and ML-DSA. Utilizing a high-performance Fortinet networking environment, we experimentally validate that "Hybrid Mode" IPsec VPNs can achieve quantum resistance with negligible performance degradation, offering a viable migration path for enterprise infrastructure. Specifically, we benchmark the trade-offs between PQC’s larger key sizes and network latency, demonstrating that the overhead remains within acceptable operational thresholds. Implementing hybrid protocols provides a critical transition mechanism, allowing organizations to secure long-term data confidentiality against retrospective decryption while preserving interoperability with legacy systems.
The imminent arrival of cryptographically relevant quantum computers poses an existential threat to the RSA, ECC, and ECDH primitives that underpin virtually every real-time payment gateway in operation today. This paper presents PQPG-MF, a structured six-phase migration framework designed to guide financial institutions and payment service providers through a comprehensive, risk-managed transition to NIST-standardised post-quantum cryptography (PQC) algorithms — specifically ML-KEM, ML-DSA, and SLH-DSA. The framework integrates hybrid classical/post-quantum cryptography during the transitional period, cryptographic agility engineering, hardware security module (HSM) compatibility planning, and regulatory compliance alignment covering PCI DSS v4.0 and ISO 27001:2022. We evaluate the framework against three reference architectures — a high-throughput card network gateway, an open-banking API hub, and a central bank digital currency (CBDC) node — demonstrating feasibility across diverse latency, throughput, and compliance constraints. Performance benchmarks reveal that ML-KEM-768 introduces handshake overhead of 1.4–2.1 ms over baseline TLS 1.3 in production-grade deployments, within the tolerance of real-time payment SLAs. Our threat modelling analysis using the HARVEST NOW, DECRYPT LATER attack vector underscores the urgency of migration even before large-scale quantum computers are available. The PQPG-MF framework provides actionable guidance supported by tooling recommendations, governance considerations, and a phased roadmap adaptable to institutions of varying scale.
Abstract—The advent of fault-tolerant Cryptanalytically Relevant Quantum Computers (CRQCs) presents an existential threat to modern information security. Shor's polynomial-time quantum algorithm renders widely deployed public-key cryptographic primitives—including RSA, Diffie-Hellman (DH), and Elliptic Curve Cryptography (ECDH/ECDSA)—completely vulnerable to private key derivation. Furthermore, 'Harvest Now, Decrypt Later' (HNDL) adversarial campaigns actively intercept and store encrypted enterprise telemetry today, anticipating future quantum decryption capabilities. In response, the National Institute of Standards and Technology (NIST) finalized its primary Post-Quantum Cryptography (PQC) standards in FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). However, transitioning complex enterprise IT ecosystems to quantum-resistant primitives introduces severe architectural and computational disruptions: public key and signature sizes increase by several orders of magnitude, cryptographic handshake latencies escalate, network packets experience Maximum Transmission Unit (MTU) fragmentation, and legacy Hardware Security Modules (HSMs) lack microarchitectural support for lattice-based polynomial arithmetic. This paper provides an exhaustive, mathematically grounded technical survey and architectural roadmap for enterprise PQC migration. We formalize the Module Learning with Errors (M-LWE) and Module Short Integer Solution (M-SIS) hardness foundations, evaluate hybrid classical/post-quantum cryptographic transition models across standard transport protocols (TLS 1.3, IKEv2/IPsec, SSH), and formulate an enterprise Crypto-Agility Maturity Model. Furthermore, we construct an empirical enterprise testbed measuring throughput, connection establishment latency, memory footprints, and packet fragmentation across legacy and quantum-resistant suites. Our results show that while ML-KEM-768 achieves microsecond-level encapsulation, its 1,088-byte ciphertext expands TLS ClientHello payloads into multiple TCP segments under constrained networks. Finally, we establish open research directions in post-quantum identity federations, stateful hash signature tracking, and hardware-accelerated polynomial arithmetic. Index Terms—Post-Quantum Cryptography (PQC), FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), Crypto-Agility, TLS 1.3, Lattice-Based Cryptography, Harvest Now Decrypt Later, Hardware Security Modules (HSM), Enterprise Migration.
Contemporary real-time payment processing systems rely on classical asymmetric cryptographic primitives — RSA, Elliptic Curve Diffie-Hellman (ECDH), and ECDSA — that will become computationally vulnerable with the advent of cryptographically relevant quantum computers (CRQCs). This paper introduces NGCMF (Next-Generation Cryptographic Migration Framework), a comprehensive, seven-layer methodology engineered to guide payment processors, card networks, and financial institutions through a structured, auditable transition to NIST-standardised post-quantum cryptography (PQC). NGCMF spans the full cryptographic lifecycle: from automated cryptographic asset discovery and quantum risk classification, through hybrid classical/PQC architecture design and phased production rollout, to long-term cryptographic agility governance. The framework addresses the HARVEST NOW, DECRYPT LATER (HNDL) threat model — wherein adversaries archive encrypted transaction data today for future quantum decryption — as a primary migration driver, alongside conventional forward-secrecy and integrity requirements. We instantiate NGCMF across four real-world payment system archetypes: an ISO 8583 card network switch, an open-banking REST API hub, a CBDC settlement node, and a cross-border SWIFT MX messaging gateway. Performance evaluations demonstrate that ML-KEM-768 (FIPS 203) introduces TLS 1.3 handshake overhead of 1.4–2.3 ms, within real-time SLA tolerances, while ML-DSA (FIPS 204) requires HSM horizontal scaling for high-frequency signing workloads. Regulatory mapping confirms alignment with PCI DSS v4.0, ISO 27001:2022, EU DORA, and NIST SP 800-57 Part 1 Rev. 5. The NGCMF provides financial institutions with a practitioner-oriented, standards-grounded roadmap for achieving quantum-resilient payment infrastructure within a 12–18 month deployment horizon.
The arrival of cryptographically relevant quantum computers (CRQCs) represents an existential threat to the public-key cryptographic infrastructure underpinning global enterprise operations. Enterprise security today relies on RSA and elliptic-curve cryptography (ECC) for TLS, VPNs, PKI, code signing, and identity systems—all of which are fundamentally broken by Shor's algorithm on a sufficiently powerful quantum computer. The defining risk is time-shifted compromise: adversaries can harvest encrypted traffic today and decrypt it once CRQCs exist, a threat already underway according to U.S. intelligence assessments. NIST finalized three post-quantum cryptographic (PQC) standards in August 2024 (FIPS 203/204/205) and mandates deprecation of quantum-vulnerable algorithms by 2035. Yet only 5% of organizations have implemented quantum-safe encryption and 95% lack formal quantum transition plans. This paper provides a comprehensive, threat-driven analysis across seven dimensions: quantum algorithm impact, harvest-now-decrypt-later (HNDL) threat models, enterprise asset risks (PKI, TLS, VPNs, code signing, cloud, IoT, identity, blockchain, supply chain), sector-specific vulnerabilities (financial services, healthcare, critical infrastructure), cryptographic primitive analysis, migration standards and roadmaps, and enterprise readiness gaps. The convergence of HNDL attacks already underway, multi-decade data sensitivity windows, and 12–15 year enterprise migration timelines means the migration deadline has, for most sectors, already passed.
Fault-tolerant quantum computing will render RSA and ECC insecure by reducing their underlying mathematical hard problems to polynomial-time computation via Shor's algorithm. The urgency of migrating to NIST post-quantum cryptography (PQC) standards is compounded by Harvest Now, Decrypt Later (HNDL) attacks, in which adversaries archive encrypted traffic today for quantum decryption once capable hardware matures. A uniform substitution of classical primitives with lattice-based alternatives, however, creates deployment friction that existing migration guidance does not fully resolve. ML-KEM-1024 encapsulation keys (1,568 bytes) and ML-DSA signatures (2,420 - 4,627 bytes) can exceed the standard 1,500-byte Ethernet Maximum Transmission Unit (MTU) when combined with protocol framing overhead, and ML-DSA payloads strain the volatile memory of many deployed Hardware Security Modules (HSMs). These constraints impose measurable costs on handshake latency, packet fragmentation risk, and Zero Trust Architecture (ZTA) verification cycles. This paper makes three contributions. First, it characterizes the operational tension between lattice-based PQC primitives and existing cloud network constraints, drawing on FIPS 203, FIPS 204, FIPS 205, and current IETF transport-layer work. Second, it identifies specific failure modes this tension introduces for Zero Trust identity infrastructure. Third, it proposes a Tiered Cryptographic Agility Model: a workload-stratified migration framework that applies dual-wrap hybrid encryption to cold storage, symmetric key ratcheting to latency-sensitive microservices, and PQC-signed software gateway tokens to bridge the hardware adoption gap. The framework is positioned against the NIST SP 800-207 Zero Trust reference architecture and the deployment-security guidance of NIST SP 800-227.