Skip to content

GCRI · 양자기술

양자내성암호

Post-quantum cryptography replaces public-key algorithms that a future quantum computer could break with new classical algorithms designed to resist it. NIST has published standards, protocols are being updated, and organisations face a long migration across software, hardware and certificates. This page sets out the new algorithms, how migration is planned and measured, and what evidence serves the organisations and agencies carrying it out.

문의하기 주제로 돌아가기
01등록

Post quantum cryptography on the record.

자료집Quantum Technologies · topic
  1. 01질문메커니즘 4개
  2. 02분야육각형 필드 판
  3. 03지표6
  4. 04출처5
  5. 05결정 권한 보유자3
  6. 06방법3
02질문

Post quantum cryptography: how the risk develops.

Transition security and algorithm standards. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

메커니즘

New hard problems

Post-quantum algorithms rely on mathematical problems, such as those on lattices or hash functions, for which no efficient quantum attack is known.

메커니즘

Larger keys and signatures

Many post-quantum schemes use larger keys or signatures than current ones, affecting bandwidth, storage and constrained devices.

메커니즘

Hybrid modes hedge risk

Combining a classical and a post-quantum algorithm keeps security if one is later broken, a common choice during transition.

메커니즘

Agility eases future change

시스템 designed to swap algorithms easily reduce the cost of this migration and the next one.

03모니터링

양자 내성 전환 추적기.

팀이 이 주제를 따라가는 데 사용할 화면으로, 그 지표, 상태, 결정을 보여 줍니다. 이름은 예시이며 값은 설명용입니다.

양자 내성 전환 추적기

Post quantum cryptography · Crypto inventory · Wave 3

위험에 처한 장수명 데이터GCRI · 양자기술

이주

  1. 목록모든 암호
  2. 우선순위 설정데이터 수명
  3. 선택표준 알고리즘
  4. 하이브리드 배치고전 암호와 PQC
  5. 시험상호운용
  6. 전환폐기

우선순위별 시스템

아카이브 서명RSA-204829ML-DSA 하이브리드시범 운영
VPN 게이트웨이ECDH8ML-KEM 하이브리드계획됨
결제 HSMRSA-307211공급업체 로드맵차단됨
Web TLSECDHE2하이브리드 키 교환완료

진행 상황

목록화됨, %74 of 100 required하이브리드 배치, %19 of 50 required퇴역, %5 of 25 required
Post-quantum migration tracker: the screen’s structure, terms and states for Post quantum cryptography.예시 이름과 예시 값으로, 실제 기록이나 운영 중인 시스템이 아닌 설계안입니다.
04영역 전반

Every domain that keeps secrets for decades must migrate.

Migration findings are designed for the 미래 전망 시리즈. NIST published FIPS 203, 204 and 205 in 2024 and selected HQC as an additional algorithm in 2025.

  • Inventory and migration lessons.
  • Interoperability test results.
05방법과 근거

How post quantum cryptography is modelled, measured and tested.

모형, 그 가정, 데이터, 불확실성을 과학자나 엔지니어가 확인할 형태로 제시합니다. 구조는 발행된 방법을 따릅니다. 제시된 값은 예시이며 결과가 아닙니다.

시스템 모형

The couplings between the systems in post quantum cryptography: signs of influence, a reinforcing and a balancing loop, and cross-links where stress jumps.

++−+양자사이버지역사회경제R 강화B 균형
Causal loop diagram from the page’s systems; signs show the direction of influence. Illustrative structure for a system dynamics or network model, not estimated couplings.
FAIR 지침 원칙 · GO FAIR와 FORCE11W3C PROV · 월드 와이드 웹 컨소시엄불확실성의 일관된 처리에 관한 지침 · IPCCCEOS 분석 준비 데이터(Analysis Ready Data) · 지구관측위성위원회
06지표

측정되는 것과 그 정확도.

각 지표에는 단위, 주기, 그 뒤의 출처 종류, 값에 붙을 근거 표시가 있습니다. 값은 표시하지 않습니다. 값은 프로그램이 자체 권한으로 제공합니다.

지표단위주기출처 유형라벨
Standardised post-quantum algorithms건수per standard releaseNIST and other standards bodies공표 통계
Protocols with post-quantum support specified건수평가별IETF and other standards공표 통계
Web traffic using post-quantum key agreementpercent of connections월별Network measurements관측
Organisations with migration planspercent of surveyed organisationsper surveySurveys보고됨
Cryptanalysis results against candidate schemescount of significant attacks검토별Cryptographic literature보고됨
Validated implementations건수연간Cryptographic module validation lists공표 통계
07출처

근거의 출처.

이름이 명시된 공개 데이터셋과 기관 기록으로, 각각 라이선스 등급이 있습니다. 협약에 따른 출처는 그 조건에 따라서만 사용하며 결코 재게시하지 않습니다.

출처제공하는 것라이선스 등급
NIST post-quantum cryptography project and FIPS 203, 204 and 205Standards, documentation and additional selectionsPublic domain, US government
IETF post-quantum and hybrid protocol workIntegration into TLS, SSH and other protocolsOpen, IETF Trust terms
National cyber agency migration guidanceTimelines and prioritiesPublic, terms per agency
Open Quantum Safe projectOpen-source implementations for testingOpen source, MIT licence
Cloudflare Radar and similar measurementsAdoption in web trafficPublic, terms per provider (to check)
08결정

누가 결정하며 근거는 무엇에 쓰이는지.

Quantum Technologies prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

결정 주체질문이 페이지가 제공하는 근거
Organisations and security teams어떤 시스템 to migrate first and howPlanning guides; performance comparisons
표준 기구Which algorithms and parameters to standardiseCryptanalysis evidence
VendorsWhen and how to ship post-quantum supportAdoption and protocol evidence

이 주제가 생산하는 산출물

  • Migration planning guides with inventory and prioritisation steps
  • Performance comparisons of standard algorithms
  • Adoption tracking summaries
  • Evidence notes on cryptanalysis of new schemes
09핵심 질문

전문가가 묻는 것.

Migration questions start with an inventory.

  • Where does an organisation use public-key cryptography, in which 시스템, protocols, devices and suppliers?
  • Which data must remain confidential long enough to be at risk from future decryption?
  • Which post-quantum algorithms are standardised, and what are their performance and size trade-offs?
  • Should systems combine classical and post-quantum algorithms during the transition?
  • Can systems change algorithms easily in future, a property known as crypto-agility?
10메커니즘

메커니즘과 동인.

Today’s public-key cryptography rests on mathematical problems, such as factoring large numbers, that are hard for classical computers but could be solved efficiently by a large quantum computer running known algorithms. Symmetric encryption and hash functions are much less affected and can be strengthened by using longer keys. The urgent problem is therefore key exchange and digital signatures.

Two pressures drive timing. The harvest-now, decrypt-later threat means confidential data intercepted today could be read once a capable machine exists. Migration time is long: cryptography is embedded in hardware, firmware, protocols and supply chains, and some devices stay in service for decades. If the time data must stay secret plus the time migration takes exceeds the time until a capable quantum computer exists, data is already at risk.

11방법과 데이터

연구되는 방식과 방법의 한계.

방법 또는 데이터표시 내용한계
Cryptographic inventory and discovery toolsWhere vulnerable algorithms are usedEmbedded and third-party cryptography is easily missed
Cryptanalysis of candidate algorithmsConfidence in algorithm securityNew algorithms have less analysis history; some candidates were broken during evaluation
Performance and interoperability testingKey sizes, speed and protocol fitResults vary with hardware and implementation
Risk-based migration planningPriorities by data lifetime and system criticalityDepends on uncertain quantum timelines
12방법

연구되는 방식과 방법이 말할 수 없는 것.

  1. 사이버보안 및 암호학암호 자산 목록 · 전환 우선순위 설정 · QKD 구현 검토이곳에서의 적용
    정본 · STEM Commons
  2. 양자 컴퓨팅, 센싱 및 통신비교 가능한 벤치마킹 · 기술 성숙도 평가 · 보안 영향 추적이곳에서의 적용
    정본 · STEM Commons
  3. 확률과 통계충실도 추정 · 우위 주장 검증 · 특허와 투자 데이터 분석이곳에서의 적용
    정본 · STEM Commons
13Where this page’s references

Where this page’s references lead.

이 페이지를 읽을 때 기준이 되는 기구와 문서. 상태와 판은 바뀌며, 각 링크는 발행 기구로 연결됩니다.

14연결됨

이 페이지가 컨소시엄 전체에서 어디로 이어지는지.

15질문

질문과 답변.

What did NIST standardise?
In FIPS 203, 204 and 205, a lattice-based key encapsulation mechanism (ML-KEM), a lattice-based signature (ML-DSA) and a hash-based signature (SLH-DSA), with further algorithms in progress.
Is post-quantum cryptography quantum technology?
No. It runs on ordinary computers. It is designed to resist attacks by quantum computers.
Why use hybrid schemes?
Because combining classical and post-quantum algorithms keeps a connection secure if either is later found weak, hedging the risk of new schemes.
Do we need quantum computers to use post-quantum cryptography?
No. Post-quantum algorithms run on ordinary computers and devices. They are designed to be hard to break even for a future quantum computer.
What is a hybrid approach?
Combining a classical and a post-quantum algorithm so that security holds if either remains unbroken. It is used by some during the transition while confidence in new algorithms grows.
Is the platform’s Universe mission theme on migration readiness active?
The registry lists post-quantum migration readiness as a candidate mission theme for this platform. Mission selection is decided by The Global Risks Forum (GRF) within its instruments, and nothing is active until it is on the record.
보고서기여하기

이 페이지에서 증거를 기여하십시오.

보고서 is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

GCRI양자기술기하급수 기술전망 보고

개인정보, 민감한 인프라 세부 정보, 공유할 권리가 없는 자료는 절대 보내지 마십시오. 기여물은 사용 전에 검토됩니다. 기여물을 보낸다고 해서 저작자 지위나 편집 권한이 부여되지 않으며, 후원으로 조사 결과를 얻을 수 없습니다.

양자기술

방법, 데이터세트 또는 질문을 가져오십시오.

정보와 문의는 오늘부터 열려 있습니다. 문의에는 참조 번호가 부여되고 다음 단계가 안내됩니다. 신청, 결제, 컴퓨팅 할당, 등록은 해당 팀, 약관, 심사 역량이 갖추어졌을 때만 열립니다.

방법 제안 모든 연락 경로 보기
법률

이 사이트의 지도, 데이터와 그림은 맥락과 일반 정보로 제시됩니다. 조언, 예보 또는 경보가 아니며, 정보의 한계는 면책 고지와 데이터 고지에 나와 있습니다.