Paper 2023/709

Migrating Applications to Post-Quantum Cryptography: Beyond Algorithm Replacement

Alexandre Augusto Giron, Federal University of Santa Catarina (UFSC), Federal University of Technology - Parana (UTFPR)
Abstract

Post-Quantum Cryptography (PQC) defines cryptographic algorithms designed to resist the advent of the quantum computer. Most public-key cryptosystems today are vulnerable to quantum attackers, so a global-scale transition to PQC is expected. As a result, several entities foment efforts in PQC standardization, research, development, creation of Work Groups (WGs), and issuing adoption recommendations. However, there is a long road to broad PQC adoption in practice. This position paper describes why migrating to PQC is necessary and gathers evidence that the ``hybrid mode'' can help the migration process. Finally, it stresses that there are risks yet to be considered by the literature. Quantum-safe protocols are being evaluated, but more attention (and awareness) is needed for the software and protocols at the application layer. Lastly, this position paper gives further recommendations for a smother PQC migration.

Note: Paper accepted as short-paper at SECrypt 2023 (this is the preprint)

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Published elsewhere. 20th International Conference on Security and Cryptography (SECRYPT 2023)
Keywords
Post-Quantum Cryptography (PQC)Hybrid PQCNetwork Security
Contact author(s)
alexandregiron @ utfpr edu br
History
2023-05-22: approved
2023-05-17: received
See all versions
Short URL
https://ia.cr/2023/709
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2023/709,
      author = {Alexandre Augusto Giron},
      title = {Migrating Applications to Post-Quantum Cryptography: Beyond Algorithm Replacement},
      howpublished = {Cryptology {ePrint} Archive, Paper 2023/709},
      year = {2023},
      url = {https://eprint.iacr.org/2023/709}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.