High assurance post-quantum cryptography

点击翻译按钮获取中文摘要

The new capabilities of quantum computers pose an existential threat to the public-key cryptography algorithms currently used to secure communications and information technology systems, including Internet communication, electronic commerce, and critical infrastructure. Quantum-safe cryptography, also known as post-quantum cryptography, aims to develop replacement algorithms which resist attacks by future quantum computers. Although it may be a decade or more until a quantum computer is built that is sufficiently powerful to break today's encryption algorithms, it is essential to develop and deploy quantum-resistant cryptography sooner to protect today's communications from being decrypted by future attackers, and because of the long time it takes to upgrade billions of devices. The past five years have seen major advances in the field of post-quantum cryptography, centred around a standardization effort facilitated by the United States National Institute of Standards and Technology (NIST). This effort has focused on building quantum-resistant replacements for two core operations: digital signatures and public-key encryption. NIST is due to issue its first selections for replacements by the end of 2021. The long-term vision for this research program is to transition our cryptographic infrastructure to provide strong, long-term security against advances in quantum technology. The objectives of this 5-year proposal are to: 1. Build post-quantum analogues of more advanced cryptographic building blocks beyond the core digital signature and public-key encryption schemes being standardized by NIST. 2. Design and evaluate post-quantum replacements for important Internet security protocols. 3. Develop high-assurance proofs and implementations of post-quantum algorithms and protocols, supported by formal verification methods. This research program will provide new techniques for cryptographers to build upon and will provide practitioners with ready-to-use designs for updating information technology infrastructure to be quantum-secure. Results from this program will be submitted to standardization bodies such as the Internet Engineering Task Force and software implementations will be released via the Open Quantum Safe open-source software project which I lead (with industry partners from Amazon, IBM, and Microsoft). This research supports Canada's strategic investments in quantum technologies and ensures that Canadian governments, businesses, and citizens will have access to information technology systems that remain secure and private. The University of Waterloo is at the centre of Canada's Quantum Valley, an area with a high density of research and development in quantum computing and cryptography. This nexus will help attract a diverse group of strong students and provide opportunities for industry partnerships and internships, yielding graduates who will be in high demand by Canada's technology, finance, and critical infrastructure sectors.