AI 中文总结
本研究通过纵向测量20亿次TLS握手，发现后量子TLS部署在政策差异下呈配置趋同，由托管提供商推动，且无显著延迟增加，为后量子TLS过渡提供实证参考。
AI 中文摘要
后量子密码学（PQC）已从长期规划关切转变为运营优先事项。在NIST完成PQC标准化后，各国政府和标准机构发布了过渡路线图，概述了迁移时间线、优先领域和部署策略。然而，我们对这些政策的调查显示，技术规定和紧迫性存在显著差异。目前尚不清楚PQC在实践中的采用程度，以及政策差异如何转化为可观测的部署结果。为解决这一差距，我们开展了首次后量子TLS（PQ-TLS）采用情况的纵向测量研究。通过建立超过20亿次TLS握手，我们从11个全球分布的观测点分析了100万个域名的密码协商行为。尽管政策指导存在差异，我们观察到配置趋同：PQ-TLS部署绝大多数集中在单一混合构造上，且大部分表面进展由托管基础设施提供商推动。国家时间线和领域优先事项与观测到的部署模式相关性有限。与早期实验研究显示的可测量开销相反，我们发现PQ-TLS在互联网环境中不会带来有意义的延迟增加，尽管它常与传统TLS配置一同部署。这些发现共同凸显了政策预期与早期部署现实之间的差距，并提供了实证见解以指导更贴合实际的PQ-TLS过渡。
英文摘要
Post-quantum cryptography (PQC) has evolved from a long-term planning concern into an operational priority. Following NIST's standardization of PQC, governments and standard bodies published transition roadmaps outlining migration timelines, priority sectors, and deployment strategies. However, our survey of these policies reveals substantial divergence in technical prescriptions and urgency. It remains unclear how widely PQC has been adopted in practice and how policy differences translate into observable deployment outcomes. To address this gap, we present the first longitudinal measurement study of post-quantum TLS (PQ-TLS) adoption. By establishing more than 2 billion TLS handshakes, we analyze cryptographic negotiation behavior across 1 million domains from 11 globally distributed vantage points. Despite varied policy guidance, we observe configuration convergence: PQ-TLS deployment overwhelmingly centers on a single hybrid construction, and much of the apparent progress is driven by managed infrastructure providers. National timelines and sectoral priorities show limited correspondence with observed deployment patterns. Contrary to early experimental studies suggesting measurable overhead, we find that PQ-TLS introduces no meaningful latency increase in Internet settings, although it is frequently deployed alongside legacy TLS configurations. Together, these findings highlight a gap between policy expectations and early deployment reality, and provide empirical insight to inform more grounded PQ-TLS transition.
CommentsAccepted to ACM Internet Measurement Conference (IMC) 2026
