Yog li, dab tsi yog post-quantum cryptography, hauv cov lus yooj yim? Post-quantum cryptography (PQC) yog ib pawg ntawm cov algorithms cryptographic uas tsim los kom muaj kev nyab xeeb txawm tias tawm tsam tus neeg tawm tsam nrog lub khoos phis tawj quantum muaj zog. Lub ntsiab lus ntawm post-quantum cryptography tom qab lub npe yog ua ntejcise: tsis yog cryptography uas siv quantum mechanics, tab sis cryptography tsim los kom muaj sia nyob rau lub sijhawm tom qab cov khoos phis tawj quantum muaj zog txaus los rhuav tshem qhov encryption uas peb vam khom niaj hnub no.
Qhov sib txawv ntawd tseem ceeb vim tias ob qho no feem ntau tsis meej pem. Kev faib tawm ntawm quantum key siv quantum physics los tiv thaiv kev sib txuas lus. Post-quantum cryptography yog hom kev daws teeb meem sib txawv: kev suav lej ib txwm muaj, khiav ntawm cov khoos phis tawj ib txwm muaj, xaiv tshwj xeeb vim tias cov khoos phis tawj quantum tsis tuaj yeem luv nws txoj kev uas lawv tuaj yeem luv RSA lossis elliptic-curve cryptography.
Vim li cas cov khoos phis tawj quantum thiaj li tawg cov encryption niaj hnub no #
Feem ntau ntawm cov encryption tiv thaiv internet niaj hnub no, RSA, Diffie-Hellman, thiab Elliptic Curve Cryptography (ECC), vam khom rau cov teeb meem lej uas tsis yooj yim sua rau lub khoos phis tawj qub los daws teeb meem hauv lub sijhawm tsim nyog: suav cov lej loj, lossis daws qhov teeb meem logarithm sib cais. Lub khoos phis tawj quantum muaj zog txaus uas khiav Shor's algorithm tuaj yeem daws cov teeb meem zoo sib xws, daws cov teeb meem pej xeem-key cryptography uas txhawb nqa kev tshawb nrhiav ruaj ntseg, kev lees paub, thiab kev sib pauv tseem ceeb.
Qhov no tsis yog ib qho kev txhawj xeeb uas nyob deb, tsuas yog kev xav xwb uas raug kho raws li kev tshawb fawb cuav. Cov kws tshaj lij kwv yees tias lub khoos phis tawj quantum (CRQC) uas cuam tshuam nrog cryptographically, ib qho uas muaj peev xwm rhuav tshem qhov encryption tam sim no, yuav tshwm sim hauv 5 txog 15 xyoo tom ntej. Qhov tsis paub meej hauv qhov kev kwv yees ntawd yog vim li cas cov koom haum thiaj li raug hais kom ua tam sim no es tsis txhob tos hnub ruaj khov.
Qhov kev hem thawj uas ua rau qhov no ceev ceev niaj hnub no: sau qoob loo tam sim no, txhais lus tom qab #
Qhov kev pheej hmoo tam sim ntawd tshaj plaws tsis yog kev tawm tsam yav tom ntej. Nws yog ib qho uas twb tshwm sim lawm. Hauv kev tawm tsam "sau tam sim no, decrypt tom qab" (HNDL), tus yeeb ncuab cuam tshuam thiab khaws cov ntaub ntawv encrypted hnub no, tsis muaj peev xwm nyeem nws tau, thiab tsuas yog tos. Thaum lub khoos phis tawj quantum cuam tshuam nrog cryptographically muaj, cov ntaub ntawv khaws cia ntawd raug decrypted retroactively.
HNDL ua rau lub sijhawm hloov pauv luv dua li nws zoo li. Yog tias koj cov ntaub ntawv yuav tsum khaws cia zais cia rau 10 xyoo thiab cov khoos phis tawj quantum uas muaj peev xwm tawg qhov encryption niaj hnub no tuaj yeem tuaj txog hauv lub qhov rais ntawd, cov ntaub ntawv twb muaj kev pheej hmoo lawm, tam sim no, txawm tias lub khoos phis tawj uas yuav tawg nws tseem tsis tau muaj. Cov lus zais ntawm tsoomfwv, cov ntaub ntawv kho mob, cov cuab yeej cuab tam ntawm kev txawj ntse, thiab txhua cov ntaub ntawv uas muaj lub sijhawm khaws cia ntev yog cov hom phiaj tseem ceeb tshaj plaws rau txoj kev npaj no.
Dab tsi ua rau ib qho algorithm "post-quantum" #
Kev teb cov lus nug txog kev siv cryptography tom qab quantum ntawm theem algorithm txhais tau tias saib cov lej uas txhua txoj kev npaj siv. Cov algorithms tom qab quantum yog tsim los ntawm ntau lub hauv paus lej sib txawv dua li RSA thiab ECC, cov uas tiv taus ob qho kev tawm tsam classical thiab quantum. Cov kev qhia feem ntau suav nrog:
Kev siv cryptography raws li tus lej: kev ruaj ntseg raws li qhov nyuaj ntawm kev txiav txim siab cov lej kho qhov yuam kev dav dav.
Kev siv cryptography raws li Lattice: kev ruaj ntseg raws li qhov nyuaj ntawm qee qhov teeb meem hauv cov lattices siab. Qhov no yog lub hauv paus rau ML-KEM, cov algorithm KEEB KWM xaiv rau kev pauv tus yuam sij.
Kev siv hash-based cryptography: kev ruaj ntseg los ntawm cov khoom ntawm cov haujlwm cryptographic hash, siv rau hauv cov qauv kos npe zoo li SLH-DSA.
NIST cov kev siv cryptography tom qab quantum standards #
Xyoo 2024, Lub Koom Haum Hauv Tebchaws Standards thiab Technology (NIST) tau ua tiav peb qhov kev siv cryptography tom qab quantum thawj zaug standardtom qab ntau xyoo, cov txheej txheem ntsuam xyuas pej xeem. Cov no standards anchor lub ntsiab lus ntawm post-quantum cryptography hauv ib yam dab tsi concrete: peb lub npe algorithms enterprises yeej siv tau tiag tiag, es tsis yog lub hom phiaj tshawb fawb abstract.
- FIPS 203, ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism): hloov cov algorithms zoo li ECDH rau kev tsim kom muaj kev sib koom zais cia thaum pib ntawm kev sib tham encrypted.
- FIPS 204, ML-DSA (Module-Lattice-Based Digital Signature Algorithm): ib qho kev hloov pauv uas tiv taus quantum rau cov qauv kos npe digital xws li RSA thiab ECDSA.
- FIPS 205, SLH-DSA (Stateless Hash-Based Digital Signature Algorithm): ib txoj kev kos npe raws li hash uas muab lwm txoj hauv kev ruaj ntseg rau ML-DSA.
cov standards muab cov neeg muag khoom, tsoomfwv, thiab enterpriselub hom phiaj ruaj khov los tsim kom muaj, uas yog qhov ua rau kev siv cryptography tom qab quantum los ntawm kev tshawb fawb mus rau hauv ib yam dab tsi nrog lub sijhawm kawg rau kev tsiv teb tsaws chaw.
Kev Hloov Chaw Cryptography Tom Qab Quantum Yog Dab Tsi? Ib Txoj Kev Ua Tau Zoo #
Cov sijhawm hloov pauv tab tom sib hloov, txawm tias lawv tsis pom zoo rau ib xyoos xwb los xij. NSA xav kom National Security Systems yuav khoom tom qab Lub Ib Hlis 2027 kom muaj kev nyab xeeb rau yav tom ntej. standards. Lub koom haum NCSC ntawm UK tau tshaj tawm cov ntsiab lus tseem ceeb ntawm kev tsiv teb tsaws chaw rau xyoo 2028, 2031, thiab 2035. Lub koom haum EU tau tshaj tawm nws daim ntawv qhia kev npaj ua ntu zus mus txog xyoo 2035. Keeb kwm, hloov chaw siv cryptographic standard thoob plaws hauv kev lag luam (3DES rau AES, SHA-1 rau SHA-2) tau siv sijhawm 5 txog 20 xyoo, uas yog ib feem ntawm vim li cas cov lus qhia yog pib thaum ntxov es tsis txhob tos kom muaj kev txib.
Txoj kev tsiv teb tsaws chaw zoo li no:
Txhawb cov neeg muag khoom thiab kev yuav khoom. Kev npaj txhij tom qab quantum tab tom dhau los ua ib lo lus nug enterprises nug lawv cov neeg muab khoom, tsis yog ib qho project sab hauv xwb.
Kev tshawb pom cryptographic. Txheeb xyuas qhov twg RSA, ECC, Diffie-Hellman, daim ntawv pov thawj, cov yuam sij, thiab cov tsev qiv ntawv cryptographic tau siv thoob plaws cov ntawv thov, cov khoom siv, thiab cov neeg sab nraud. Cov kauj ruam no ib txwm piav qhia tias yog qhov qeeb tshaj plaws thiab tsis tau kwv yees ntau tshaj plaws ntawm tag nrho cov txheej txheem.
Muab qhov tseem ceeb los ntawm kev rhiab heev thiab lub neej. Cov ntaub ntawv uas muaj sia ntev thiab muaj nqis heev (cov cuab yeej cuab tam ntawm kev txawj ntse, tsoomfwv lossis cov ntaub ntawv kev noj qab haus huv) yog thawj lub hom phiaj rau kev tawm tsam harvest-now-decrypt-lateer, yog li nws raug tsiv mus ua ntej.
Txais yuav crypto-agility. Tsim cov txheej txheem uas tuaj yeem hloov pauv cov algorithms cryptographic yam tsis tas yuav rov ua dua tshiab, vim tias cov lus qhia tshiab thiab kev txhim kho tom qab quantum tseem xav tau thaum kev saws txais yuav loj hlob tuaj.
Sim cov kev sib xyaw ua ke. Ntau qhov kev siv thaum ntxov ua ke ib qho algorithm classical nrog ib qho post-quantum hauv tib qho kev sib koom tes (piv txwv li, X25519 ua ke nrog ML-KEM), yog li qhov kev sib txuas tseem ruaj ntseg tsuav yog tsawg kawg yog ib qho ntawm ob qho algorithms tuav.
Vim li cas kev tshawb pom cryptographic yog qhov nyuaj #
Yuav luag txhua qhov chaw ntawm PQC migration sib sau ua ke rau tib qho chaw pib: koj tsis tuaj yeem hloov cryptography uas koj tsis paub tias koj muaj. Cryptography tau muab tso rau hauv cov ntawv thov, cov kev pabcuam huab, cov khoom siv network, cov txheej txheem kev txheeb xyuas tus kheej, thiab cov tsev qiv ntawv sab nraud, feem ntau tsis pom rau cov pab pawg uas muaj lub luag haujlwm rau nws. Ua ntej muaj kev hloov pauv algorithm tshwm sim, ib lub koom haum xav tau cov khoom muag raug, cov qauv ntawm qhov chaw uas cov classical cryptography nyob niaj hnub no. Cov khoom muag ntawd yog qhov uas ib Daim Ntawv Qhia Txog Cov Khoom Siv Cryptographic (CBOM) yog tsim los muab, thiab nws yog thawj kauj ruam ua tau zoo tom qab yuav luag txhua txoj kev npaj tsiv teb tsaws chaw PQC.
FAQ #
Tsis yog. Quantum cryptography (zoo li quantum key distribution) siv quantum physics los tiv thaiv kev sib txuas lus. Post-quantum cryptography siv cov lej classical, tsis yog quantum, xaiv tshwj xeeb vim nws tiv taus kev tawm tsam los ntawm quantum computers. PQC khiav ntawm cov computers thiab networks uas peb twb muaj lawm.
Tseem tsis tau, raws li kev paub ntawm pej xeem. Cov kws tshaj lij kwv yees tias lub khoos phis tawj quantum uas cuam tshuam nrog cryptographically yuav tuaj txog hauv 5 txog 15 xyoos, txawm hais tias lub sijhawm tseeb tsis paub meej tiag tiag. Qhov tsis paub meej nws tus kheej yog ib feem ntawm kev sib cav rau kev tsiv teb tsaws chaw thaum ntxov es tsis txhob tos hnub uas tau lees paub.
Vim yog lub sijhawm sau qoob loo tam sim no, decrypt tom qab. Cov ntaub ntawv encrypted niaj hnub no nrog cov algorithms classical tuaj yeem raug intercepted thiab khaws cia tam sim no, tom qab ntawd decrypted retroactively thaum lub computer quantum muaj peev xwm. Yog tias koj cov ntaub ntawv yuav tsum khaws cia zais cia rau ntau xyoo, qhov kev nthuav tawm pib thaum nws raug ntes, tsis yog thaum nws raug decrypted.
Crypto-agility yog lub peev xwm ntawm lub kaw lus los hloov cov algorithms cryptographic yam tsis muaj kev hloov kho tshiab loj. Txij li thaum post-quantum standards tseem tshiab thiab xav kom raug txhim kho nrog kev paub tiag tiag, cov koom haum uas tuaj yeem hloov algorithms yooj yim yuav tsiv mus rau lwm qhov nrog kev cuam tshuam tsawg dua li cov uas muaj cryptography hardcoded thoob plaws lawv cov kab ke.
Nrog kev tshawb pom: ib daim ntawv teev tag nrho, qhov tseeb ntawm qhov chaw uas cov algorithms cryptographic qub, cov yuam sij, thiab daim ntawv pov thawj siv tiag tiag. Yog tsis muaj daim ntawv teev ntawd, qhov tseem ceeb tshaj plaws yog qhov yuav tsum tau hloov chaw ua ntej, thiab ua pov thawj kev nce qib rau cov neeg tshuaj xyuas lossis cov neeg tswj hwm, tsis yooj yim sua.
