The Quantum-Secure Bootstrap Protocol (QSBP): An Event-Driven, Auditable Framework for Trust Continuity in the Post-Quantum Migration
Thomas Scillian
The standardization of post-quantum cryptographic (PQC) primitives by the U.S. National Institute of Standards and Technology (NIST) resolves the question of which algorithms enterprises should adopt, but it does not resolve how organizations establish, observe, and prove trust during a migration that will span many years and heterogeneous, long-lived systems. This paper argues that the binding enterprise problem in the post-quantum transition is not primitive selection but trust continuity: the ability to establish quantum-resistant trust and to produce durable, lifecycle-level evidence that it was established correctly. We introduce the Quantum-Secure Bootstrap Protocol (QSBP), an open protocol framework defined by four design requirements — algorithm agnosticism, event-driven operation, auditability, and forward compatibility — and expressed as a seven-stage trust-establishment lifecycle. QSBP is deliberately specified at the level of protocol shape and observable events rather than implementation: it describes the stages that should be visible and auditable without exposing cryptographic secrets or proprietary mechanics. We position QSBP as a proposed standard shape intended to make trust establishment legible to auditors, compliance officers, architects, and executives, not only to cryptographers. The contribution is a vocabulary and a lifecycle model for governing the transition period, offered for critique and standardization. Recent U.S. federal policy accelerating PQC migration for federal systems, contractors, and critical infrastructure sharpens the practical relevance of an auditable, governance-legible bootstrap framework. Keywords: post-quantum cryptography; trust continuity; cryptographic agility; auditability; protocol standardization; harvest-now-decrypt-later; critical infrastructure; cryptographic governance; quantum networking; enterprise security architecture
•Jun 29, 2026•0 citations