识别后量子密码学迁移和密码灵活性的研究挑战
Identifying Research Challenges in Post Quantum Cryptography Migration and Cryptographic Agility
摘要：
足够大的量子计算机对广泛使用的公钥密码学的影响是有据可查的，并且越来越多地被安全社区讨论。值得注意的是，美国国家标准与技术研究所（NIST）2016年4月的一份报告呼吁需要新的标准来取代基于整数分解和离散对数问题的密码系统，这些问题已被证明容易受到Shor的素数分解量子算法的影响。具体来说，广泛使用的RSA、ECDSA、ECDH和DSA密码系统将需要被后量子密码学（PQC）替代方案（也称为量子抵抗或量子安全密码学）取代。在实现足够强大的量子计算机之前未能进行转换将危及公钥密码系统的安全性，这些密码系统广泛部署在通信协议、数字签名机制、认证框架等中。为了避免这种情况，NIST自2016年以来一直积极领导PQC标准化工作，利用大型国际研究社区。2019年1月31日至2月1日，计算社区联盟（CCC）在华盛顿特区举行了一次研讨会，讨论与PQC迁移相关的研究挑战。题为“确定后量子密码学迁移和密码敏捷性的研究挑战”，与会者来自三个不同但相关的社区：为NIST PQC标准工作做出贡献的密码学家，在创建密码解决方案和在现实环境中实施密码学方面具有专业知识的应用密码学家，以及在产品和计算基础设施中部署密码标准方面具有专业知识的行业从业者。讨论围绕两个关键主题展开：识别PQC迁移中的组成挑战和想象一种新的“加密敏捷性”科学。
英文摘要：
The implications of sufficiently large quantum computers for widely used public-key cryptography is well-documented and increasingly discussed by the security community. An April 2016 report by the National Institute of Standards and Technology (NIST), notably, calls out the need for new standards to replace cryptosystems based on integer factorization and discrete logarithm problems, which have been shown to be vulnerable to Shor's quantum algorithm for prime factorization. Specifically, widely used RSA, ECDSA, ECDH, and DSA cryptosystems will need to be replaced by post-quantum cryptography (PQC) alternatives (also known as quantum-resistant or quantum-safe cryptography). Failure to transition before sufficiently powerful quantum computers are realized will jeopardize the security of public key cryptosystems which are widely deployed within communication protocols, digital signing mechanisms, authentication frameworks, and more. To avoid this, NIST has actively led a PQC standardization effort since 2016, leveraging a large and international research community. On January 31-February 1, 2019, the Computing Community Consortium (CCC) held a workshop in Washington, D.C. to discuss research challenges associated with PQC migration. Entitled, "Identifying Research Challenges in Post Quantum Cryptography Migration and Cryptographic Agility", participants came from three distinct yet related communities: cryptographers contributing to the NIST PQC standards effort, applied cryptographers with expertise in creating cryptographic solutions and implementing cryptography in real-world settings, and industry practitioners with expertise in deploying cryptographic standards within products and compute infrastructures. Discussion centered around two key themes: identifying constituent challenges in PQC migration and imagining a new science of "cryptographic agility".
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
