Preparing Your Operating System for Post-Quantum Security 🔐

Migrating Operating System Toward Post-Quantum Cryptography - Daiki Ueno, Red Hat

In the area of computer security, we are on the cusp of the post-quantum era: cryptanalytically-relevant quantum computers (CRQC) pose a threat to public-key algorithms used today in network protocols and data formats. To address this concern, NIST has standardized a set of quantum-resistant algorithms, while NSA has announced the guidance for migrating national security systems to quantum resistant algorithms targeting 2035. In the open source community, we at the Fedora project are exploring adoption of those algorithms to set the ground for protecting our current and future users. In this session, we will present our strategy and the status of the effort.

Topics to be covered:
Key exchange and digital signature: threat models and priorities
State of the art algorithms and cryptanalysis
Avoiding implementation divergences across the operating system: consolidating the implementation to liboqs, a project part of the Post-Quantum Cryptography Alliance
Safely integrating non-finalized algorithms in a backward compatible manner
Example integration in TLS, IPsec, and verifiable data storage