GCRI · Teknologi Kuantum
Kriptografi pascakuantum
Post-quantum cryptography replaces public-key algorithms that a future quantum computer could break with new classical algorithms designed to resist it. NIST has published standards, protocols are being updated, and organisations face a long migration across software, hardware and certificates. This page sets out the new algorithms, how migration is planned and measured, and what evidence serves the organisations and agencies carrying it out.
Post quantum cryptography on the record.
Post quantum cryptography: how the risk develops.
Transition security and algorithm standards. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.
New hard problems
Post-quantum algorithms rely on mathematical problems, such as those on lattices or hash functions, for which no efficient quantum attack is known.
Larger keys and signatures
Many post-quantum schemes use larger keys or signatures than current ones, affecting bandwidth, storage and constrained devices.
Hybrid modes hedge risk
Combining a classical and a post-quantum algorithm keeps security if one is later broken, a common choice during transition.
Agility eases future change
Sistem designed to swap algorithms easily reduce the cost of this migration and the next one.
Pelacak migrasi pasca-kuantum.
Layar yang akan digunakan sebuah tim untuk mengikuti subjek ini: ukuran, status, dan keputusannya. Nama adalah contoh dan nilai bersifat ilustratif.
Pelacak migrasi pasca-kuantum
Post quantum cryptography · Crypto inventory · Wave 3
Migrasi
- Inventarissemua kripto
- Prioritaskanumur data
- Pilihalgoritma standar
- Penerapan hibridaklasik dan PQC
- Ujiinteroperabilitas
- Peralihanpensiunkan
Sistem menurut prioritas
| Penandatanganan arsip | RSA-2048 | 29 | Hibrida ML-DSA | Uji coba |
| Gerbang VPN | ECDH | 8 | Hibrida ML-KEM | Direncanakan |
| HSM pembayaran | RSA-3072 | 11 | Peta jalan vendor | Terhambat |
| Web TLS | ECDHE | 2 | Pertukaran kunci hibrida | Selesai |
Kemajuan
Every domain that keeps secrets for decades must migrate.
- KesehatanKeterkaitanPatient data has long confidentiality lifetimes.What to watchInventory of vulnerable algorithms
- EnergiKeterkaitanLong-lived grid devices need upgradable cryptography.What to watchCrypto-agility of devices
- PanganKeterkaitanTrade and payment systems rely on public-key infrastructure.What to watchPKI migration plans
Migration findings are designed for the Seri Prospek Kajian Masa Depan. NIST published FIPS 203, 204 and 205 in 2024 and selected HQC as an additional algorithm in 2025.
- Inventory and migration lessons.
- Interoperability test results.
How post quantum cryptography is modelled, measured and tested.
Model, asumsi, data, dan ketidakpastiannya, dalam bentuk yang akan diperiksa ilmuwan atau insinyur. Strukturnya mengikuti metode yang dipublikasikan. Nilai yang digambar bersifat ilustratif, bukan temuan.
Model sistem
The couplings between the systems in post quantum cryptography: signs of influence, a reinforcing and a balancing loop, and cross-links where stress jumps.
Apa yang diukur, dan seberapa baik.
Setiap indikator membawa satuan, frekuensi, jenis sumber di baliknya, dan label bukti yang akan dibawa suatu nilai. Tidak ada nilai yang ditampilkan: sebuah program menyediakannya berdasarkan wewenangnya sendiri.
| Indikator | Unit | Kadensi | Jenis sumber | Label |
|---|---|---|---|---|
| Standardised post-quantum algorithms | jumlah | per standard release | NIST and other standards bodies | Statistik terbitan |
| Protocols with post-quantum support specified | jumlah | per penilaian | IETF and other standards | Statistik terbitan |
| Web traffic using post-quantum key agreement | percent of connections | setiap bulan | Network measurements | TERAMATI |
| Organisations with migration plans | percent of surveyed organisations | per survey | Surveys | DILAPORKAN |
| Cryptanalysis results against candidate schemes | count of significant attacks | per tinjauan | Cryptographic literature | DILAPORKAN |
| Validated implementations | jumlah | tahunan | Cryptographic module validation lists | Statistik terbitan |
Asal bukti.
Set data publik bernama dan catatan kelembagaan, masing-masing dengan kelas lisensinya. Sumber berdasarkan perjanjian hanya digunakan sesuai ketentuannya dan tidak pernah diterbitkan ulang.
| Sumber | Apa yang diberikannya | Kelas lisensi |
|---|---|---|
| NIST post-quantum cryptography project and FIPS 203, 204 and 205 | Standards, documentation and additional selections | Public domain, US government |
| IETF post-quantum and hybrid protocol work | Integration into TLS, SSH and other protocols | Open, IETF Trust terms |
| National cyber agency migration guidance | Timelines and priorities | Public, terms per agency |
| Open Quantum Safe project | Open-source implementations for testing | Open source, MIT licence |
| Cloudflare Radar and similar measurements | Adoption in web traffic | Public, terms per provider (to check) |
Siapa yang memutuskan, dan apa yang dilayani bukti.
Quantum Technologies prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.
| Siapa yang memutuskan | Pertanyaannya | Bukti yang dilayani halaman ini |
|---|---|---|
| Organisations and security teams | Which sistem to migrate first and how | Planning guides; performance comparisons |
| Badan standar | Which algorithms and parameters to standardise | Cryptanalysis evidence |
| Vendors | When and how to ship post-quantum support | Adoption and protocol evidence |
Keluaran yang dihasilkan topik ini
- Migration planning guides with inventory and prioritisation steps
- Performance comparisons of standard algorithms
- Adoption tracking summaries
- Evidence notes on cryptanalysis of new schemes
Apa yang ditanyakan pakar.
Migration questions start with an inventory.
- Where does an organisation use public-key cryptography, in which sistem, protocols, devices and suppliers?
- Which data must remain confidential long enough to be at risk from future decryption?
- Which post-quantum algorithms are standardised, and what are their performance and size trade-offs?
- Should systems combine classical and post-quantum algorithms during the transition?
- Can systems change algorithms easily in future, a property known as crypto-agility?
Mekanisme dan pendorong.
Today’s public-key cryptography rests on mathematical problems, such as factoring large numbers, that are hard for classical computers but could be solved efficiently by a large quantum computer running known algorithms. Symmetric encryption and hash functions are much less affected and can be strengthened by using longer keys. The urgent problem is therefore key exchange and digital signatures.
Two pressures drive timing. The harvest-now, decrypt-later threat means confidential data intercepted today could be read once a capable machine exists. Migration time is long: cryptography is embedded in hardware, firmware, protocols and supply chains, and some devices stay in service for decades. If the time data must stay secret plus the time migration takes exceeds the time until a capable quantum computer exists, data is already at risk.
Cara hal ini dikaji, dan di mana batas metodenya.
| Metode atau data | Apa yang ditampilkannya | Batasan |
|---|---|---|
| Cryptographic inventory and discovery tools | Where vulnerable algorithms are used | Embedded and third-party cryptography is easily missed |
| Cryptanalysis of candidate algorithms | Confidence in algorithm security | New algorithms have less analysis history; some candidates were broken during evaluation |
| Performance and interoperability testing | Key sizes, speed and protocol fit | Results vary with hardware and implementation |
| Risk-based migration planning | Priorities by data lifetime and system criticality | Depends on uncertain quantum timelines |
Cara hal ini dikaji, dan apa yang tidak dapat dinyatakan metodenya.
- 01Keamanan siber dan kriptografiInventaris kriptografi · Prioritisasi migrasi · Tinjauan implementasi QKDDiterapkan di sini
- 02Komputasi, penginderaan, dan komunikasi kuantumTolok ukur yang dapat dibandingkan · Penilaian kesiapan teknologi · Pelacakan implikasi keamananDiterapkan di sini
- 03Probabilitas dan statistikaEstimasi fidelitas · Pengujian klaim keunggulan · Analisis data paten dan investasiDiterapkan di sini
Where this page’s references lead.
Badan dan dokumen yang menjadi acuan halaman ini. Status dan edisi berubah; setiap tautan menuju badan penerbitnya.
Ke mana halaman ini mengarah di seluruh Konsorsium.
Tanya jawab.
What did NIST standardise?
Is post-quantum cryptography quantum technology?
Why use hybrid schemes?
Do we need quantum computers to use post-quantum cryptography?
What is a hybrid approach?
Is the platform’s Universe mission theme on migration readiness active?
Kontribusikan bukti dari halaman ini.
Laporan is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.
- SurelGerbang GW-GCRIKirim dari halaman iniBukti, koreksi, kasus, metode, tinjauan, terjemahan, atau masukan profil. Kiriman tiba dengan label halaman ini, sehingga editor pemiliknya menerimanya.
- ZenodoDeposit terbukaDeposit dan ajukan ke komunitasTerbitkan catatan Anda sendiri di Zenodo dengan ORCID iD Anda, lalu ajukan ke komunitas Reports di sana. Kurator meninjaunya; DOI tetap milik Anda.
- LaporanGCRILihat semua cara berkontribusiJenis kontribusi, cara masing-masing ditinjau, kredit yang Anda terima, lisensinya, dan apa yang tidak pernah diterima.
Jangan pernah mengirim data pribadi, rincian infrastruktur sensitif, atau apa pun yang tidak berhak Anda bagikan. Kontribusi ditinjau sebelum digunakan. Mengirimkannya tidak memberikan hak kepenulisan atau editorial, dan sponsor tidak pernah membeli sebuah temuan.
Bawa metode, dataset, atau pertanyaan.
Informasi dan pertanyaan sudah terbuka hari ini. Sebuah pertanyaan menerima nomor referensi dan menyebutkan langkah berikutnya; lamaran, pembayaran, alokasi komputasi, dan pendaftaran hanya dibuka ketika tim, ketentuan, dan kapasitas tinjauannya tersedia.
Dokumen hukum.
Peta, data, dan gambar di situs ini ditampilkan untuk konteks dan informasi umum. Semua itu bukan nasihat, prakiraan, atau peringatan; batasan informasinya dijelaskan dalam Penafian dan Pemberitahuan Data.