Status report on the third round of the NIST post-quantum cryptography standardization process
Status report on the third round of the NIST post-quantum cryptography standardization process
复制标题
DOI：
10.30837/rt.2022.3.210.05
复制
发表时间：
2022-09
期刊：
影响因子：
--
通讯作者：
M. Yesina;Ye. V. Ostrianska;I. Gorbenko
中科院分区：
文献类型：
--
作者：
M. Yesina;Ye. V. Ostrianska;I. Gorbenko
近年来，量子计算机的创建取得了稳步进展。如果实现大规模量子计算机，它们将威胁到许多广泛使用的公钥密码系统的安全性。基于因子分解、离散时间序列和椭圆曲线密码学的密钥建立方案和数字签名将受到最大的影响。对称密码原语（如块密码和散列函数）将仅被轻微破坏。因此，人们一直在加紧研究如何找到公钥密码系统，以防止量子和经典计算机的密码分析师。这个领域通常被称为后量子密码学（PQC），有时也称为量子抵抗密码学。我们的目标是设计方案，可以部署在现有的通信网络和协议，而没有显着的变化。美国国家标准与技术研究所正在通过公开竞争选择一种或多种公钥密码算法。新的公钥加密标准将定义一个或多个附加的数字签名、公钥加密和密钥建立算法。据推测，这些算法将能够在不久的将来很好地保护机密信息，包括在量子计算机出现之后。经过三轮评估和分析，NIST选择了第一批将作为PQC标准化过程的结果进行标准化的算法。本文的目的是回顾和分析NIST的后量子密码标准化评估和选择过程的状态。本文总结了第三轮的15个候选算法，并确定了选择用于标准化的算法，以及将在第四轮分析中继续评估的算法。虽然第三轮即将结束，NIST将开始制定第一个PQC标准，但该领域的标准化工作仍将持续一段时间。这不应该被解释为用户应该等待采用后量子算法。NIST期待这些第一批标准化算法的快速实施，并将发布未来的过渡指南。毫无疑问，过渡将有许多复杂性，并且对于某些用例（如物联网设备或证书透明度）将存在挑战。
In recent years, there has been steady progress in the creation of quantum computers. If large-scale quantum computers are implemented, they will threaten the security of many widely used public-key cryptosystems. Key-establishment schemes and digital signatures based on factorization, discrete logarithms, and elliptic curve cryptography will be most affected. Symmetric cryptographic primitives such as block ciphers and hash functions will be broken only slightly. As a result, there has been an intensification of research on finding public-key cryptosystems that would be secure against cryptanalysts with both quantum and classical computers. This area is often called post-quantum cryptography (PQC), or sometimes quantum-resistant cryptography. The goal is to design schemes that can be deployed in existing communication networks and protocols without significant changes. The National Institute of Standards and Technology is in the process of selecting one or more public-key cryptographic algorithms through an open competition. New public-key cryptography standards will define one or more additional digital signatures, public-key encryption, and key-establishment algorithms. It is assumed that these algorithms will be able to protect confidential information well in the near future, including after the advent of quantum computers. After three rounds of evaluation and analysis, NIST has selected the first algorithms that will be standardized as a result of the PQC standardization process. The purpose of this article is to review and analyze the state of NIST's post-quantum cryptography standardization evaluation and selection process. The article summarizes each of the 15 candidate algorithms from the third round and identifies the algorithms selected for standardization, as well as those that will continue to be evaluated in the fourth round of analysis. Although the third round is coming to an end and NIST will begin developing the first PQC standards, standardization efforts in this area will continue for some time. This should not be interpreted as meaning that users should wait to adopt post-quantum algorithms. NIST looks forward to the rapid implementation of these first standardized algorithms and will issue future guidance on the transition. The transition will undoubtedly have many complexities, and there will be challenges for some use cases such as IoT devices or certificate transparency.