High assurance post-quantum cryptography

量子计算机的新功能对目前用于保护通信和信息技术系统（包括互联网通信、电子商务和关键基础设施）的公钥密码算法构成了生存威胁。量子安全密码学，也称为后量子密码学，旨在开发替代算法，以抵抗未来量子计算机的攻击。虽然可能需要十年或更长时间才能建造出足够强大的量子计算机来破解当今的加密算法，但必须尽快开发和部署抗量子密码学，以保护当今的通信免受未来攻击者的解密，并且因为升级数十亿设备需要很长时间。在过去的五年里，后量子密码学领域取得了重大进展，主要围绕着美国国家标准与技术研究所（NIST）推动的标准化工作。这项工作的重点是为两个核心操作构建抗量子的替代品：数字签名和公钥加密。NIST将于2021年底前发布首批替代品。该研究计划的长期愿景是将我们的加密基础设施转变为针对量子技术进步提供强大的长期安全性。本五年计划的目标是：1。在NIST正在标准化的核心数字签名和公钥加密方案之外，构建更先进的加密构建块的后量子模拟。2.为重要的互联网安全协议设计和评估后量子替代品。3.开发后量子算法和协议的高保证证明和实现，并得到正式验证方法的支持。这项研究计划将为密码学家提供新的技术，并为从业者提供随时可用的设计，以更新信息技术基础设施，使其成为量子安全的。该计划的结果将提交给标准化机构，如互联网工程任务组，软件实现将通过我领导的开放量子安全开源软件项目（与亚马逊，IBM和微软的行业合作伙伴）发布。这项研究支持加拿大在量子技术方面的战略投资，并确保加拿大政府、企业和公民能够访问安全和私密的信息技术系统。滑铁卢大学位于加拿大量子谷的中心，该地区在量子计算和密码学方面拥有高密度的研究和开发。这种联系将有助于吸引不同群体的优秀学生，并为行业合作伙伴关系和实习提供机会，从而产生加拿大技术，金融和关键基础设施部门对毕业生的高需求。

The new capabilities of quantum computers pose an existential threat to the public-key cryptography algorithms currently used to secure communications and information technology systems, including Internet communication, electronic commerce, and critical infrastructure. Quantum-safe cryptography, also known as post-quantum cryptography, aims to develop replacement algorithms which resist attacks by future quantum computers. Although it may be a decade or more until a quantum computer is built that is sufficiently powerful to break today's encryption algorithms, it is essential to develop and deploy quantum-resistant cryptography sooner to protect today's communications from being decrypted by future attackers, and because of the long time it takes to upgrade billions of devices. The past five years have seen major advances in the field of post-quantum cryptography, centred around a standardization effort facilitated by the United States National Institute of Standards and Technology (NIST). This effort has focused on building quantum-resistant replacements for two core operations: digital signatures and public-key encryption. NIST is due to issue its first selections for replacements by the end of 2021. The long-term vision for this research program is to transition our cryptographic infrastructure to provide strong, long-term security against advances in quantum technology. The objectives of this 5-year proposal are to: 1. Build post-quantum analogues of more advanced cryptographic building blocks beyond the core digital signature and public-key encryption schemes being standardized by NIST. 2. Design and evaluate post-quantum replacements for important Internet security protocols. 3. Develop high-assurance proofs and implementations of post-quantum algorithms and protocols, supported by formal verification methods. This research program will provide new techniques for cryptographers to build upon and will provide practitioners with ready-to-use designs for updating information technology infrastructure to be quantum-secure. Results from this program will be submitted to standardization bodies such as the Internet Engineering Task Force and software implementations will be released via the Open Quantum Safe open-source software project which I lead (with industry partners from Amazon, IBM, and Microsoft). This research supports Canada's strategic investments in quantum technologies and ensures that Canadian governments, businesses, and citizens will have access to information technology systems that remain secure and private. The University of Waterloo is at the centre of Canada's Quantum Valley, an area with a high density of research and development in quantum computing and cryptography. This nexus will help attract a diverse group of strong students and provide opportunities for industry partnerships and internships, yielding graduates who will be in high demand by Canada's technology, finance, and critical infrastructure sectors.