Post-Quantum Cryptographic Integration Framework for Zero Trust Architecture in Enterprise Cloud Environments
Vijayent Kohli, Shriya Misra
The convergence of two federal mandates-Executive Order 14028 (Zero Trust Architecture) and National Security Memorandum 10 (post-quantum cryptography migration)-introduces significant challenges in enterprise cloud environments. Specifically, NIST's newly standardized postquantum algorithms (FIPS 203-205, Aug. 2024) produce cryptographic artifacts 3-5× larger than classical primitives and incur greater computational overhead, conflicting with Zero Trust's continuous authentication requirements. This paper proposes PQ-ZTA, a comprehensive integration framework addressing 23 distinct challenges across five architectural layers: Identity, Network, Data, Application, and Policy. We introduce five design patterns, hybrid cryptographic envelope, policy-based algorithm selection, certificate chain compression, lazy PQC Migration, and Cryptographic Monitoring to enable incremental PQC deployment while preserving Zero Trust security principles. Our formal analysis shows that these hybrid constructions maintain IND-CCA2 security as long as either the classical or post-quantum component remains secure, providing defense-in-depth during the transition. Additionally, we outline a six-phase migration methodology (covering 2025-2028+) that prioritizes protecting long-lived data and securing external interfaces before internal services. This framework offers a practical roadmap for organizations integrating quantum-resistant cryptography into modern Zero Trust architectures under NSA CNSA 2.0 deadlines (Dec. 2025) and NIST's 2030 deprecation targets.
•Dec 16, 2025•0 citations