arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2301.04491cs.CR
收藏

PMMP——后量子密码迁移管理流程

PMMP -- PQC Migration Management Process

Nils von Nethen, Alex Wiesmaier, Nouri Alnahawi, Johanna Henrich

AI总结:

针对组织向抗量子密码迁移缺乏通用管理方法的问题,提出基于风险的PMMP流程,集成于组织控制机制,旨在建立密码敏捷性,并推动实践评估。

摘要:

组织必须规划向抗量子密码措施(也称为PQC)的迁移。然而,这是一项艰巨的任务,据我们所知,目前尚无一种通用方法来管理IT系统中使用的密码学这种复杂迁移,并明确集成到组织的指导机制和控制系统中。我们提出了PMMP,一种基于风险的流程,用于管理组织从经典密码学向PQC的迁移,并建立密码敏捷性。在完成初始设计阶段以及理论评估后,我们现在打算推广PMMP。我们鼓励从业者加入这项工作,以便实现全面的实践评估和进一步开发。

英文摘要:

Organizations have to plan on migrating to quantum-resilient cryptographic measures, also known as PQC. However, this is a difficult task, and to the best of our knowledge, there is no generalized approach to manage such a complex migration for cryptography used in IT systems that explicitly integrates into organizations' steering mechanisms and control systems. We present PMMP, a risk-based process for managing the migration of organizations from classic cryptography to PQC and establishing crypto-agility. Having completed the initial design phase, as well as a theoretical evaluation, we now intend to promote PMMP. Practitioners are encouraged to join the effort in order to enable a comprehensive practical evaluation and further development.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑