Abstract:In recent years, there has been steady progress in the creation of quantum computers. If large-scale quantum computers are implemented, they will threaten the security of many widely used public-key cryptosystems. Key-establishment schemes and digital signatures based on factorization, discrete logarithms, and elliptic curve cryptography will be most affected. Symmetric cryptographic primitives such as block ciphers and hash functions will be broken only slightly. As a result, there has been an intensification of research on finding public-key cryptosystems that would be secure against cryptanalysts with both quantum and classical computers. This area is often called post-quantum cryptography (PQC), or sometimes quantum-resistant cryptography. The goal is to design schemes that can be deployed in existing communication networks and protocols without significant changes. The National Institute of Standards and Technology is in the process of selecting one or more public-key cryptographic algorithms through an open competition. New public-key cryptography standards will define one or more additional digital signatures, public-key encryption, and key-establishment algorithms. It is assumed that these algorithms will be able to protect confidential information well in the near future, including after the advent of quantum computers. After three rounds of evaluation and analysis, NIST has selected the first algorithms that will be standardized as a result of the PQC standardization process. The purpose of this article is to review and analyze the state of NIST's post-quantum cryptography standardization evaluation and selection process. The article summarizes each of the 15 candidate algorithms from the third round and identifies the algorithms selected for standardization, as well as those that will continue to be evaluated in the fourth round of analysis. Although the third round is coming to an end and NIST will begin developing the first PQC standards, standardization efforts in this area will continue for some time. This should not be interpreted as meaning that users should wait to adopt post-quantum algorithms. NIST looks forward to the rapid implementation of these first standardized algorithms and will issue future guidance on the transition. The transition will undoubtedly have many complexities, and there will be challenges for some use cases such as IoT devices or certificate transparency.

A Compact Full Hardware Implementation of PQC Algorithm NTRU

High-Speed Hardware Implementation of PQC Algorithm LAC

Hardware Design of PQC Classic McEliece Finite Field Operations and Encryption Module

Reveal the Invisible Secret: Chosen-Ciphertext Side-Channel Attacks on NTRU

Post-Quantum Cryptographic Hardware Primitives

PQPU: A 4.4- $\mu$ J/Op 69.4-Kops Agile Post-Quantum Crypto-Processor Across Multiple Mathematical Problems

Hardware Design and Optimization of Polynomial Multiplication for Post-Quantum Cryptography Algorithm Based on NTT

Cryptanalysis on "NTRU+: Compact Construction of NTRU Using Simple Encoding Method"

RePQC: A 3.4-uJ/Op 48-kOPS Post-Quantum Crypto-Processor for Multiple-Mathematical Problems

Designing a Scalable and Area-Efficient Hardware Accelerator Supporting Multiple PQC Schemes

16.2 A 28nm 69.4kOPS 4.4μJ/Op Versatile Post-Quantum Crypto-Processor Across Multiple Mathematical Problems.

Unif-NTT: A Unified Hardware Design of Forward and Inverse NTT for PQC Algorithms

Efficient NTTRU Implementation on ARMv8

A Programmable Crypto-Processor for National Institute of Standards and Technology Post-Quantum Cryptography Standardization Based on the RISC-V Architecture

An Improved Practical Key Mismatch Attack Against NTRU

Compact and Efficient KEMs over NTRU Lattices

A fast NTRU software implementation based on 5-way TMVP

A pure hardware implementation of CRYSTALS-KYBER PQC algorithm through resource reuse

Status report on the third round of the NIST post-quantum cryptography standardization process

Scalable and Parallel Optimization of the Number Theoretic Transform Based on FPGA

High-Performance Hardware Implementation of CRYSTALS-Dilithium