Migrating Software Systems Toward Post-Quantum Cryptography-A Systematic Literature Review

被引:0
|
作者
Naether, Christian [1 ]
Herzinger, Daniel [2 ]
Gazdag, Stefan-Lukas [2 ]
Steghoefer, Jan-Philipp [1 ]
Daum, Simon [2 ]
Loebenberger, Daniel [3 ]
机构
[1] XITASO Gmbh, D-86153 Augsburg, Germany
[2] genua GmbH, D-85551 Kirchheim, Germany
[3] Fraunhofer AISEC, D-85748 Garching, Germany
来源
IEEE ACCESS | 2024年 / 12卷
关键词
Data mining; Cryptography; Planning; Surveys; Software systems; Quantum computing; Protocols; Migration; post-quantum cryptography; quantum-safe; transition;
D O I
10.1109/ACCESS.2024.3450306
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Networks such as the Internet are essential for our connected world. Quantum computing threatens its fundamental security mechanisms. Therefore, a migration to post-quantum-cryptography (PQC) is necessary for networks and their components. Currently, there is little knowledge on how such migrations should be structured and implemented in practice. Our systematic literature review addresses migration approaches for IP networks towards PQC. It surveys papers about the migration process and exemplary real-world software system migrations. On the process side, we found that terminology, migration steps, and roles are not defined precisely or consistently across the literature. Still, we identified four major phases and appropriate substeps which we matched with also emerging archetypes of roles. In terms of real-world migrations, we see that reports used several different PQC implementations and hybrid solutions for migrations of systems belonging to a wide range of system types. Across all papers we noticed three major challenges for adopters: missing experience of PQC and a high realization effort, concerns about the security of the upcoming system, and finally, high complexity. Our findings indicate that recent standardization efforts already push quantum-safe networking forward. However, the literature is still not in consensus about definitions and best practices. Implementations are mostly experimental and not necessarily practical, leading to an overall chaotic situation. To better grasp this fast moving field of (applied) research, our systematic literature review provides a comprehensive overview of its current state and serves as a starting point for delving into the matter of PQC migration.
引用
收藏
页码:132107 / 132126
页数:20
相关论文
共 50 条
  • [31] Post-quantum cryptography: lattice signatures
    Buchmann, Johannes
    Lindner, Richard
    Rueckert, Markus
    Schneider, Michael
    COMPUTING, 2009, 85 (1-2) : 105 - 125
  • [32] Post-Quantum Cryptography in WireGuard VPN
    Kniep, Quentin M.
    Mueller, Wolf
    Redlich, Jens-Peter
    SECURITY AND PRIVACY IN COMMUNICATION NETWORKS (SECURECOMM 2020), PT II, 2020, 336 : 261 - 267
  • [33] FPGA Accelerated Post-Quantum Cryptography
    Li, He
    Tang, Yongming
    Que, Zhiqiang
    Zhang, Jiliang
    IEEE TRANSACTIONS ON NANOTECHNOLOGY, 2022, 21 : 685 - 691
  • [34] Implementing Post-quantum Cryptography for Developers
    Hekkala, Julius
    Halunen, Kimmo
    Vallivaara, Visa
    PROCEEDINGS OF THE 8TH INTERNATIONAL CONFERENCE ON INFORMATION SYSTEMS SECURITY AND PRIVACY (ICISSP), 2021, : 73 - 83
  • [35] A Quantum of QUIC: Dissecting Cryptography with Post-Quantum Insights
    Kempf, Marcel
    Gauder, Nikolas
    Jaeger, Benedikt
    Zirngibl, Johannes
    Carle, Georg
    2024 23RD IFIP NETWORKING CONFERENCE, IFIP NETWORKING 2024, 2024, : 186 - 194
  • [36] Current and future panorama of Quantum and Post-Quantum Cryptography
    Claudio, Mendilaharzu
    Fernando, Figueras
    2024 IEEE BIENNIAL CONGRESS OF ARGENTINA, ARGENCON 2024, 2024,
  • [37] Authentication Protocol for Secure Automotive Systems: Benchmarking Post-Quantum Cryptography
    Ravi, Prasanna
    Sundar, Vijaya Kumar
    Chattopadhyay, Anupam
    Bhasin, Shivam
    Easwaran, Arvind
    2020 IEEE INTERNATIONAL SYMPOSIUM ON CIRCUITS AND SYSTEMS (ISCAS), 2020,
  • [38] Future-Proofing Security for UAVs With Post-Quantum Cryptography: A Review
    Khan, Muhammad Asghar
    Javaid, Shumaila
    Mohsan, Syed Agha Hassnain
    Tanveer, Muhammad
    Ullah, Insaf
    IEEE OPEN JOURNAL OF THE COMMUNICATIONS SOCIETY, 2024, 5 : 6849 - 6871
  • [39] A Survey of Post-Quantum Cryptography Migration in Vehicles
    Lohmiller, Nils
    Kaniewski, Sabrina
    Menth, Michael
    Heer, Tobias
    IEEE ACCESS, 2025, 13 : 10160 - 10176
  • [40] Resource guide for teaching post-quantum cryptography
    Holden, Joshua
    CRYPTOLOGIA, 2023, 47 (05) : 459 - 465