A Framework for Migrating to Post-Quantum Cryptography: Security Dependency Analysis and Case Studies
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , , , , , , |
|---|---|
| Format: | Preprint |
| Publié: |
2023
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866910339125215232 |
|---|---|
| author | Hasan, Khondokar Fida Simpson, Leonie Baee, Mir Ali Rezazadeh Islam, Chadni Rahman, Ziaur Armstrong, Warren Gauravaram, Praveen McKague, Matthew |
| author_facet | Hasan, Khondokar Fida Simpson, Leonie Baee, Mir Ali Rezazadeh Islam, Chadni Rahman, Ziaur Armstrong, Warren Gauravaram, Praveen McKague, Matthew |
| contents | Quantum computing is emerging as a significant threat to information protected by widely used cryptographic systems. Cryptographic methods, once deemed secure for decades, are now at risk of being compromised, posing a massive threat to the security of sensitive data and communications across enterprises worldwide. As a result, there is an urgent need to migrate to quantum-resistant cryptographic systems. This is no simple task. Migrating to a quantum-safe state is a complex process, and many organisations lack the in-house expertise to navigate this transition without guidance. In this paper, we present a comprehensive framework designed to assist enterprises with this migration. Our framework outlines essential steps involved in the cryptographic migration process, and leverages existing organisational inventories. The framework facilitates the efficient identification of cryptographic assets and can be integrated with other enterprise frameworks smoothly. To underscore its practicality and effectiveness, we have incorporated case studies that utilise graph-theoretic techniques to pinpoint and assess cryptographic dependencies. This is useful in prioritising crypto-systems for replacement. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2307_06520 |
| institution | arXiv |
| publishDate | 2023 |
| record_format | arxiv |
| spellingShingle | A Framework for Migrating to Post-Quantum Cryptography: Security Dependency Analysis and Case Studies Hasan, Khondokar Fida Simpson, Leonie Baee, Mir Ali Rezazadeh Islam, Chadni Rahman, Ziaur Armstrong, Warren Gauravaram, Praveen McKague, Matthew Cryptography and Security Quantum computing is emerging as a significant threat to information protected by widely used cryptographic systems. Cryptographic methods, once deemed secure for decades, are now at risk of being compromised, posing a massive threat to the security of sensitive data and communications across enterprises worldwide. As a result, there is an urgent need to migrate to quantum-resistant cryptographic systems. This is no simple task. Migrating to a quantum-safe state is a complex process, and many organisations lack the in-house expertise to navigate this transition without guidance. In this paper, we present a comprehensive framework designed to assist enterprises with this migration. Our framework outlines essential steps involved in the cryptographic migration process, and leverages existing organisational inventories. The framework facilitates the efficient identification of cryptographic assets and can be integrated with other enterprise frameworks smoothly. To underscore its practicality and effectiveness, we have incorporated case studies that utilise graph-theoretic techniques to pinpoint and assess cryptographic dependencies. This is useful in prioritising crypto-systems for replacement. |
| title | A Framework for Migrating to Post-Quantum Cryptography: Security Dependency Analysis and Case Studies |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2307.06520 |