Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Computational Modelling, Simulation and Optimization (ICCMSO)

Crypto-Agile Enterprise Security Framework Using Post-Quantum Cryptography and Automated PKI for the Agentic AI Era

Vidyasagar Palla

Published Jun 1, 2026• 0 citations
Publisher
DOI
10.23919/iccmsocps00092.2026.00035

Related papers

Post-Quantum Cryptography Benchmarking and Crypto-Agile Migration for Quantum-Resilient Network Security

Saoud AlAbdulla, Mustafa Al Samara, Okba Ben Atia +2 more

International Wireless Communications and Mobile Computing Conference (IWCMC)•Jun 1, 2026•0 citations

Quantum-Resistant Cryptographic Protocols Enhanced by AI- Driven Vulnerability Analysis for Future-Proof Enterprise Security

Zillay Huma

•Jan 1, 2025•0 citations

Crypto-Agile migration to Hybrid Post-Quantum Cryptography in Enterprise TLS PKI VPN and Cloud-Native Systems and services

Stanley Nwakamma, John Ojukwu, Serif Oyindamola Oyesiji

The transition to post-quantum cryptography presents enterprises with a complex systems-engineering challenge extending beyond algorithm replacement. Transport Layer Security, public key infrastructure, virtual private networks, cloud-native platforms, identity services, and machine-to-machine communications depend on interconnected cryptographic libraries, certificates, protocols, hardware modules, policies, and vendor products. This review examines crypto-agile migration to hybrid post-quantum cryptography, where classical and quantum-resistant mechanisms are combined to preserve established assurance while emerging algorithms and implementations mature. It develops a migration-oriented taxonomy covering cryptographic discovery, dependency mapping, hybrid key establishment, composite authentication, certificate lifecycle management, protocol negotiation, performance optimization, interoperability testing, and operational governance. Particular attention is given to larger keys, ciphertexts, and signatures; handshake fragmentation; certificate-chain expansion; hardware acceleration; legacy compatibility; downgrade resistance; and observability across distributed environments. The review compares migration requirements in enterprise TLS, PKI, remote-access and site-to-site VPNs, service meshes, API gateways, container platforms, serverless services, secrets systems, and multicloud infrastructures. It also analyzes staged deployment patterns, including inventory-first modernization, proxy-based termination, dual certificates, hybrid tunnels, algorithm-policy abstraction, and controlled fallback. Evaluation criteria integrate security, interoperability, latency, throughput, bandwidth, memory, certificate issuance, operational resilience, and rollback readiness. The findings indicate that successful migration depends on treating cryptography as a continuously governed enterprise capability rather than a fixed protocol configuration. The paper concludes by identifying gaps in standardization, automated discovery, cross-vendor testing, cryptographic telemetry, constrained-device support, and lifecycle evidence, providing organizations with a structured foundation for prioritized, reversible, and verifiable post-quantum transformation across heterogeneous digital services. Keywords: Crypto-Agility, Hybrid Cryptography, Post-Quantum Cryptography, Public Key Infrastructure, Quantum-Safe Migration, Transport Layer Security.

Gulf Journal of Computer Sciences•Aug 2, 2026•0 citations

Risk-Adaptive Framework for Enterprise Post-Quantum Cryptography Readiness and Transition

Ali Qureshi

•Jan 1, 2026•1 citation

Architectural Integration and Strategic Risk Management of Post-Quantum Cryptography in Hybrid Enterprise Networks: A Systematic Review of Crypto-Agility, Implementation, and Policy Compliance.

Abhinav Patel, Aryan Upadhyay, Ayush Vashishth +2 more

Hybrid enterprise environments combining public cloud, private infrastructure, and edge devices—rely fundamentally on classical public-key cryptography (PKC) for secure key exchange, authentication, and digital signatures. The emergence of cryptographically relevant quantum computers (CRQCs) threatens to dismantle these foundations via algorithms such as Shor's, rendering current data confidentiality and long-term security guarantees obsolete.1 This systematic review transitions the focus from pure cloud security to the complex architectural challenge of integrating Post-Quantum Cryptography (PQC) across distributed enterprise landscapes. The analysis examines the foundational PQC candidates (NIST selection), assesses architectural dependencies (PKI, KMS, ZTA), reviews implementation hurdles (side-channels, performance overhead in IoT), and details the strategic necessity of crypto-agility. Furthermore, this report critically examines the global regulatory framework, including US CNSA 2.0 and FIPS 140-3, highlighting critical gaps in migration planning, governance, and compliance readiness required to mitigate the systemic risk of the "Harvest Now, Decrypt Later" threat model.

DMPedia Lecture Notes in Multidisciplinary Research•Mar 13, 2026•1 citation

Quantum-aware software engineering: An AI-driven framework for measuring cryptographic agility in enterprise systems

Ayobami Adebesin

The timely development of quantum computing is a fundamental threat to modern cryptographic systems, which are instantiated by enterprise software. Secure communication, authentication, and data protection rely on classical public-key algorithmic techniques that are likely to become susceptible to large-scale quantum attacks, and there is an urgent shift to quantum-resistant as well as successively cryptographically agile architectures. This article suggests a new AIware software engineering model, Quantum-Aware, is an AI-based measurement system that aims to assess and improve cryptographic agility at the enterprise scale. The framework combines the software engineering, post-quantum cryptography, and artificial intelligence principles to determine how well an organization is prepared to respond to new quantum threats through crypto-mechanisms. The suggested model presents a multi-layered assessment model that examines software architecture, cryptographic dependencies, diversity of algorithms, key management practices and update mechanisms. Complexity of migrations is measured and hard-coded cryptographic primitives are automatically detected in machine learning techniques to predict the effect of an algorithm substitution on system performance and security assurance. The framework can produce a measurable, comparative value, a Cryptographic Agility Index (CAI), that represents a measure of how easy an enterprise system is to move between cryptographic standards when changes are necessary. Moreover, the framework assists in decision-making by providing advanced refactoring strategies and adaptive controls in accordance with the post-quantum requirements, regulatory provisions and the level of risk tolerance.

GSC Advanced Research and Reviews•Dec 31, 2025•0 citations
The transition to post-quantum cryptography presents enterprises with a complex systems-engineering challenge extending beyond algorithm replacement. Transport Layer Security, public key infrastructure, virtual private networks, cloud-native platforms, identity services, and machine-to-machine communications depend on interconnected cryptographic libraries, certificates, protocols, hardware modules, policies, and vendor products. This review examines crypto-agile migration to hybrid post-quantum cryptography, where classical and quantum-resistant mechanisms are combined to preserve established assurance while emerging algorithms and implementations mature. It develops a migration-oriented taxonomy covering cryptographic discovery, dependency mapping, hybrid key establishment, composite authentication, certificate lifecycle management, protocol negotiation, performance optimization, interoperability testing, and operational governance. Particular attention is given to larger keys, ciphertexts, and signatures; handshake fragmentation; certificate-chain expansion; hardware acceleration; legacy compatibility; downgrade resistance; and observability across distributed environments. The review compares migration requirements in enterprise TLS, PKI, remote-access and site-to-site VPNs, service meshes, API gateways, container platforms, serverless services, secrets systems, and multicloud infrastructures. It also analyzes staged deployment patterns, including inventory-first modernization, proxy-based termination, dual certificates, hybrid tunnels, algorithm-policy abstraction, and controlled fallback. Evaluation criteria integrate security, interoperability, latency, throughput, bandwidth, memory, certificate issuance, operational resilience, and rollback readiness. The findings indicate that successful migration depends on treating cryptography as a continuously governed enterprise capability rather than a fixed protocol configuration. The paper concludes by identifying gaps in standardization, automated discovery, cross-vendor testing, cryptographic telemetry, constrained-device support, and lifecycle evidence, providing organizations with a structured foundation for prioritized, reversible, and verifiable post-quantum transformation across heterogeneous digital services. Keywords: Crypto-Agility, Hybrid Cryptography, Post-Quantum Cryptography, Public Key Infrastructure, Quantum-Safe Migration, Transport Layer Security.
Hybrid enterprise environments combining public cloud, private infrastructure, and edge devices—rely fundamentally on classical public-key cryptography (PKC) for secure key exchange, authentication, and digital signatures. The emergence of cryptographically relevant quantum computers (CRQCs) threatens to dismantle these foundations via algorithms such as Shor's, rendering current data confidentiality and long-term security guarantees obsolete.1 This systematic review transitions the focus from pure cloud security to the complex architectural challenge of integrating Post-Quantum Cryptography (PQC) across distributed enterprise landscapes. The analysis examines the foundational PQC candidates (NIST selection), assesses architectural dependencies (PKI, KMS, ZTA), reviews implementation hurdles (side-channels, performance overhead in IoT), and details the strategic necessity of crypto-agility. Furthermore, this report critically examines the global regulatory framework, including US CNSA 2.0 and FIPS 140-3, highlighting critical gaps in migration planning, governance, and compliance readiness required to mitigate the systemic risk of the "Harvest Now, Decrypt Later" threat model.
The timely development of quantum computing is a fundamental threat to modern cryptographic systems, which are instantiated by enterprise software. Secure communication, authentication, and data protection rely on classical public-key algorithmic techniques that are likely to become susceptible to large-scale quantum attacks, and there is an urgent shift to quantum-resistant as well as successively cryptographically agile architectures. This article suggests a new AIware software engineering model, Quantum-Aware, is an AI-based measurement system that aims to assess and improve cryptographic agility at the enterprise scale. The framework combines the software engineering, post-quantum cryptography, and artificial intelligence principles to determine how well an organization is prepared to respond to new quantum threats through crypto-mechanisms. The suggested model presents a multi-layered assessment model that examines software architecture, cryptographic dependencies, diversity of algorithms, key management practices and update mechanisms. Complexity of migrations is measured and hard-coded cryptographic primitives are automatically detected in machine learning techniques to predict the effect of an algorithm substitution on system performance and security assurance. The framework can produce a measurable, comparative value, a Cryptographic Agility Index (CAI), that represents a measure of how easy an enterprise system is to move between cryptographic standards when changes are necessary. Moreover, the framework assists in decision-making by providing advanced refactoring strategies and adaptive controls in accordance with the post-quantum requirements, regulatory provisions and the level of risk tolerance.