Modern information security
POST-QUANTUM CRYPTOGRAPHY: CURRENT STATE AND PROSPECTS
Г. С. Єлісєєва
Abstract
Post-quantum cryptography is one of the key areas of development of modern means of information protection inconnection with the active progress of quantum technologies. Classical cryptographic algorithms, such as RSA and ECC,become vulnerable due to the Shor algorithm, which threatens the long-term security of information systems. The articleprovides an in-depth review of the current state of post-quantum cryptographic algorithms based on the results of the NationalInstitute of Standards and Technology (NIST) selection, and also analyzes the approaches proposed in recent scientificpublications. The characteristics of the Kyber, Dilithium, Falcon, and SPHINCS+ algorithms are considered in detail - theirsecurity parameters, performance, cryptographic strength, requirements for hardware resources, and possibilities of applicationin practical systems. Special attention is paid to the issues of integrating post-quantum algorithms into existing cryptographicprotocols, in particular, into public-key systems, public-key infrastructure, and secure communication channels. The keyproblems of implementing post-quantum cryptography in information infrastructures are considered, including: increased keysizes and cryptographic parameters, computational delays, compatibility with existing software and hardware solutions, and theneed to revise key management policies. The prospects for implementing post-quantum solutions in Ukraine are separatelyanalyzed, and practical recommendations are offered for a phased migration to such algorithms for state and corporate systems,taking into account the requirements for long-term data confidentiality and protection of critical information infrastructure.Keywords: post-quantum cryptography, quantum attacks, NIST PQC, Kyber, Dilithium, Falcon, SPHINCS+,cryptoresistance. References1. NIST. (n.d.). Post-Quantum Cryptography Standardization Project. https://csrc.nist.gov/projects/postquantum-cryptography.2. NIST. (2024). NIST releases first 3 finalized post-quantum encryption standards. https://www.nist.gov/newsevents.3. Dam, D. T., Mavroeidis, V., & Vishi, K. (2023). A survey of post-quantum cryptography: Start of a newquantum era. Cryptography, 7(3). https://doi.org/10.3390/cryptography7030040.4. Kokare, Priyanka & Vora, Deepali & Patil, Shruti & Kotecha, Ketan & Khairnar, Vaishali & Choudhury,Tanupriya & Kulkarni, Ambarish. (2024). Post Quantum Cryptography: A survey of Past and Future.https://www.researchgate.net/publication/382398375_Post_Quantum_Cryptography_A_survey_of_Past_and_Future.5. Chen, L., Jordan, S., Liu, Y.-K., Moody, D., Peralta, R., Perlner, R., Smith-Tone, D. (2016). Report on PostQuantum Cryptography. NIST IR 8105. https://doi.org/10.6028/NIST.IR.8105.6. Bos, J. W., et al. (2017). CRYSTALS-Kyber: A CCA-Secure Module-Lattice-Based KEM. https://pqcrystals.org/kyber/data/kyber-specification-round3.pdf.7. Ducas, L., et al. (2018). CRYSTALS-Dilithium: Digital Signatures from Module Lattices. https://pqcrystals.org/dilithium/data/dilithium-specification-round3.pdf.8. Pöppelmann, T., Oder, T., & Güneysu, T. (2015). High-Speed Ideal Lattice-Based Cryptography on 8-bit AVRMicrocontrollers. IACR Cryptology ePrint Archive, Report 2015/382. https://eprint.iacr.org/2015/382.pdf.9. Cloudflare. (2023). Post-Quantum Cryptography Support in TLS and Web Infrastructure.https://blog.cloudflare.com/tag/post-quantum-cryptography/.10. ETSI. (2020). Quantum-Safe Cryptography – An Overview. https://www.etsi.org/technologies/quantum-safecryptography.11. NCSC UK. (2020). Preparing for Quantum-Safe Cryptography. https://www.ncsc.gov.uk/whitepaper/preparing-for-quantum-safe-cryptography.12. Keyfactor & Ponemon Institute. (2023). State of Machine Identity Management Report. Keyfactor, Inc.https://www.keyfactor.com.13. Shor, P. (1994). Algorithms for quantum computation: Discrete logarithms and factoring. Proceedings of the35th Annual Symposium on Foundations of Computer Science.14. Bernstein, D., & Lange, T. (2017). Post-Quantum Cryptography. Springer. https://doi.org/10.1007/978-3-540-88702-7.15. Grover, L. (1996). A fast quantum mechanical algorithm for database search. STOC '96.https://doi.org/10.1145/237814.237866.16. Mosca, M. (2018). Cybersecurity in an era with quantum computers: Will we be ready? IEEE Security &Privacy, 16(5), 38–41. https://doi.org/10.1109/MSP.2018.3761723.17. Prest, T. (2020). Efficient implementation issues in Falcon. https://falcon-sign.info.18. SPHINCS+ Team. (n.d.). SPHINCS+ Specification. https://sphincs.org/data/sphincs+-specification.pdf.