Organizations have to plan on migrating to quantum-resilient cryptographic measures, also known as PQC. However, this is a difficult task, and to the best of our knowledge, there is no generalized approach to manage such a complex migration for cryptography used in IT systems that explicitly integrates into organizations' steering mechanisms and control systems. We present PMMP, a risk-based process for managing the migration of organizations from classic cryptography to PQC and establishing crypto-agility. Having completed the initial design phase, as well as a theoretical evaluation, we now intend to promote PMMP. Practitioners are encouraged to join the effort in order to enable a comprehensive practical evaluation and further development.
A Global Readiness and Sovereignty Capability Model for Post-Quantum Cryptography Migration
Centre for Intelligent Cloud Computing, CoE for Advanced Cloud, Faculty of Information Science and Technology, Multimedia University(多媒体大学信息科学与技术学院先进云计算卓越中心智能云计算中心)
A Non-Invasive Cloud-Based Migration Strategy for Post-Quantum Cybersecurity in Smart HVAC Systems: Architecture, Implementation, and Empirical Evaluation
Islamic University of Technology, Gazipur, Bangladesh(伊斯兰理工大学,加济布尔,孟加拉国);Laurentian University, Sudbury, ON, Canada(劳伦森大学,萨德伯里,安大略省,加拿大);Centennial College, Toronto, ON, Canada(百年理工学院,多伦多,安大略省,加拿大)