计算机技术与发展2024,Vol.34Issue(5):103-108,6.DOI:10.20165/j.cnki.ISSN1673-629X.2024.0047
迈向量子安全:后量子密码迁移研究与思考
Toward Quantum Security:Research and Reflections on Post-quantum Cryptographic Migration
摘要
Abstract
The rapid development of quantum technology brings the realization of large-scale quantum computers just a matter of time,and the proposal of some quantum algorithms(e.g.,Shor,Grover,Simon)makes it possible to implement quantum computing attacks on modern cryptosystems(public-key cryptography and symmetric cryptography),which seriously threatens the security of classical cryptography.In order to enhance the ability of cryptosystems to resist quantum computing attacks,post-quantum cryptography(PQC)algorithms,represented by lattice cryptography,have received extensive attention and investigation.The migration from classical cryptography algorithms to PQC is an effective path for cryptosystems to realize quantum security.Firstly,we investigate the PQC migration routes proposed by NIST,ETSI,and other organizations and scholars,which are summarized as three migration routes,namely,the substitution scheme represented by NIST,and the double encryption scheme represented by ETSI,and other hybrid encryption schemes.Secondly,for the migration process of PQC,we introduce the migration strategy from the three aspects of migration target,migration preparation,and migration implementation.In addition,in order to promote the smooth and efficient implementation of PQC migration,we propose the migration evaluation elements to be considered,including six aspects of resource investment,time cost,business risk,maintenance cost,user experience,and business impact.Finally,we propose the future research direction of PQC migration.Overall,the work in this paper will provide a useful reference for the scientific design and efficient implementation of PQC migration.关键词
后量子密码/迁移/信息安全/系统安全/网络安全Key words
post-quantum cryptography/migration/information security/system security/network security分类
信息技术与安全科学引用本文复制引用
冯艺萌,刘昂..迈向量子安全:后量子密码迁移研究与思考[J].计算机技术与发展,2024,34(5):103-108,6.基金项目
中央高校基本科研业务费资金资助(3282023015,3282023051) (3282023015,3282023051)