Selected links and resources relevant to post-quantum cryptography adoption.
- For a more research-oriented overview see e.g., pqcrypto.org or
- pqc-forum mailing list
-
NIST Releases First 3 Finalized Post-Quantum Encryption Standards (August 2024)
-
Call for Additional Digital Signature Schemes (July 2023)
-
NIST PQC Competition (2017-2024)
-
Standards:
- FIPS 203: ML-KEM (CRYSTALS-Kyber)
- FIPS 204: ML-DSA (CRYSTALS-Dilithium)
- FIPS 205: SLH-DSA (SPHINCS+)
- FALCON: FIPS TBD
Post-Quantum Cryptography Hub: Provides content for all levels of technical expertise, including CISOs, security engineers, crypto-savvy folks, and anyone interested in learning more about post-quantum security.
Blogs:
- Post-Quantum Cryptography: Standards and Progress
- Cloud CISO Perspectives: Why we need to get ready for PQC
- How Google is preparing for a post-quantum world
- Why Google now uses post-quantum cryptography for internal comms
- Transitioning organizations to post-quantum cryptography | Nature
- Podcast: EP164 Quantum Computing: Understanding the (very serious) Threat and Post-Quantum Cryptography
Technical:
- Google's Threat model for Post-Quantum Cryptography
- Cryptographic Agility and Key Rotation
- Why Hybrid Deployments Are Key to Secure PQC Migration
- Formally Verified Post-Quantum Algorithms
- Tink library: experimental | pqcrypto
- Sophie Schmieg, Stefan Koelbl: RWC’23: Crypto Agility and Post-Quantum Cryptography
- Stefan Koelbl: TNO Symposium on PQcrypto'23: PQC5_Slides_Stefan.Kolbl.pdf
Chrome:
- A new path for Kyber on the web
- Advancing Our Amazing Bet on Asymmetric Cryptography
- Protecting Chrome Traffic with Hybrid Kyber KEM
FIDO:
Regulations / Directives / Requirements / Roadmaps
Focus on first steps: Crypto Inventory, Crypto Agility
- US White House Memorandum NSM-8: Improving the Cybersecurity of National Security (Jan 2022)
- US White House Memorandum NSM-10: Promoting United States Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems (May 2022)
- NSA PQC Roadmap
Focus on Risk Management
- ESMA / European Banking Authority (EBA) : JC 2023 86 - Final report on draft RTS on ICT Risk Management Framework and on simplified ICT Risk Management Framework
- FS-ISAC whitepaper: Preparing for a Post-Quantum World by Managing Cryptographic Risk
- World Economic Forum: Quantum Security for the Financial Sector: Informing Global Regulatory Approaches Forum
- World Economic Forum: Transitioning to a Quantum-Secure Economy