Abstract:The implications of sufficiently large quantum computers for widely used public-key cryptography is well-documented and increasingly discussed by the security community. An April 2016 report by the National Institute of Standards and Technology (NIST), notably, calls out the need for new standards to replace cryptosystems based on integer factorization and discrete logarithm problems, which have been shown to be vulnerable to Shor's quantum algorithm for prime factorization. Specifically, widely used RSA, ECDSA, ECDH, and DSA cryptosystems will need to be replaced by post-quantum cryptography (PQC) alternatives (also known as quantum-resistant or quantum-safe cryptography). Failure to transition before sufficiently powerful quantum computers are realized will jeopardize the security of public key cryptosystems which are widely deployed within communication protocols, digital signing mechanisms, authentication frameworks, and more. To avoid this, NIST has actively led a PQC standardization effort since 2016, leveraging a large and international research community. On January 31-February 1, 2019, the Computing Community Consortium (CCC) held a workshop in Washington, D.C. to discuss research challenges associated with PQC migration. Entitled, "Identifying Research Challenges in Post Quantum Cryptography Migration and Cryptographic Agility", participants came from three distinct yet related communities: cryptographers contributing to the NIST PQC standards effort, applied cryptographers with expertise in creating cryptographic solutions and implementing cryptography in real-world settings, and industry practitioners with expertise in deploying cryptographic standards within products and compute infrastructures. Discussion centered around two key themes: identifying constituent challenges in PQC migration and imagining a new science of "cryptographic agility".

Identifying Obstacles of PQC Migration in E-Estonia

Migrating Software Systems towards Post-Quantum-Cryptography -- A Systematic Literature Review

Identifying Research Challenges in Post Quantum Cryptography Migration and Cryptographic Agility

On PQC Migration and Crypto-Agility

Post-Quantum Cryptography (PQC) Network Instrument: Measuring PQC Adoption Rates and Identifying Migration Pathways

Migration to Post Quantum Cryptography

Enhancing Transportation Cyber-Physical Systems Security: A Shift to Post-Quantum Cryptography

A Framework for Migrating to Post-Quantum Cryptography: Security Dependency Analysis and Case Studies

PMMP -- PQC Migration Management Process

Securing Social Well-Being in the Quantum Age: Legal Roadmaps for PQC in Banking to Healthcare

Cybersecurity in Critical Infrastructures: A Post-Quantum Cryptography Perspective

Post Quantum Cryptography: Readiness Challenges and the Approaching Storm

A Toolchain for Assisting Migration of Software Executables Towards Post-Quantum Cryptography

Evaluation Framework for Quantum Security Risk Assessment: A Comprehensive Strategy for Quantum-Safe Transition

European Quantum Ecosystems -- Preparing the Industry for the Quantum Security and Communications Revolution

Applications of Post-quantum Cryptography

A Security Assessment tool for Quantum Threat Analysis

Quantum-Resistant Cryptography

A Survey of Post-Quantum Cryptography: Start of a New Race

Framework for understanding quantum computing use cases from a multidisciplinary perspective and future research directions