A Vendor’s View on PQC Challenges (Q13a)
As technology advances and the reality of quantum computing becomes more real, the world must prepare for a scenario where most of our classical algorithms are vulnerable to being broken. NSA has issued a cybersecurity advisory in Commercial National Security Algorithm (CNSA) Suite 2.0 which specifies requirements and timelines to transition our current classical algorithms to Post Quantum Cryptography (PQC) algorithms. However, implementing these PQC algorithms has many challenges that vendors must face and address. Some of the challenges include entropy requirements for PQC algorithms, not enough time to vet unknown PQC algorithms/implementations, side-channel and/or AI attacks on PQC algorithms/implementations, and PQC key management. This presentation will focus on challenges to implementing PQC algorithms and will present some proposed solutions to resolve or mitigate them.