TL; DR
Ko te whakamunatanga muri-kuantum (PQC) he tikanga mō ngā rauropi whakamunatanga i hangaia hei ārai i te whakaekenga a tētahi rorohiko kuantum nui ā muri ake nei. He herenga tawhito te heke ki tēnei rorohiko puta noa i Ūropi, i Amerika me Āhia-Moananui-a-Kiwa — ehara i te kaupapa rangahau i ēnei rā.
Ko te tuku tuatahi i ngā wāhi katoa he rarangi taonga, ehara i te whakarerekētanga waehere. Ko ia tikanga, pērā i NIST IR 8547, Whakawhiti ki te Whakamunatanga Muri-Kuantum Standards, te Te mahere ara o te EU, A Spain CCN-TEC 009 me ngā mea rite mō ētahi atu rohe, me ngā taunakitanga ā-rāngai pēnei i te PCI DSS 12.3.3, ka tīmata mā te tono kia whakarārangihia e koe te whakamunatanga e whakamahia ana e koe.
Ko tētahi whakatinanatanga kua whakaarohia mō tētahi rarangi taonga pēnei mō ngā rawa whakamuna ko te CBOM (Cryptographic Bill of Materials), he rārangi ka taea te pānui e te mīhini o ngā rauropi, ngā kī, ngā tiwhikete me ngā kawa e whakamahia ana e te pūnaha. He toronga tēnei o te mea rongonui SBOM me te mea i tūtohutia standardhōputu kua whakaritea mō taua rarangi taonga.
Tirohia te rā tōmua rawa o te herenga; kāore pea i te tau 2035. Ko te nuinga o ngā mana whakahaere e whakaaro ana kia kitea ngā mea i te tau 2026–2028, kia kitea ngā mea mōrearea i te tau 2030–2031, ā, kia oti i te tau 2035. E mōhiotia ana ngā whāinga, engari ehara i te mea kotahi te whakakapinga. ML-KEM whakakapi i te whakawhiti kī, ML-DSA whakakapi i ngā waitohu whānui, i te mea ko ngā kaupapa e hangai ana ki te hash (SLH-DSA, XMSS/LMS) te pūmanawa uhi me ngā pakiaka roa. Kei te tukuna kētia te whare matua i runga i te tauine ipurangi; kua roa ngā tiwhikete me ngā waitohu e tatari ana — nō reira he rerekē te ota tere me te ota wā-arataki, ā, e hiahiatia ana e tō mahere ngā mea e rua.
He tekau tau te roa o te noho tahi, ehara i te mea he whakawhiti. Tae noa ki waenganui o te tekau tau 2030, ka whakahaerehia e te nuinga o ngā whakahaere te whakamunatanga tawhito me te whakamunatanga muri-rauemi, ā, he maha ngā wā ka honoa tahitia: he hanganga ranu. Te tere o te mahi moni matihiko Koinei te mea e ora ai taua wā. Ko tōna tikanga he āheinga ki te whakarerekē i te raupaparorohiko, ngā tawhā, te whakamahi rānei i tētahi pūnaha ranu mā te whirihoranga me te kaupapa here, kaua mā te tuhi anō me te tuku anō i te waehere.
E rua ngā "karaka" e tītaha ana, ehara i te kotahi: ko te karaka whakahaere i runga ake nei, me "kohia inaianei, wetewetehia ā muri ake nei" (HNDLKo te mea whakamutunga e pā ana ki ngā hoariri e tuhi ana i ngā waka kua whakamunahia i ēnei rā hei wetewete i te raraunga ina tū he rorohiko matūriki. Ko te tikanga tēnei kua hurahia kētia ngā raraunga he roa te ora o te noho muna.
Ehara i te mea ko ngā rauropi te mea uaua, engari ko te kitenga. Ka huna te whakamunatanga i roto i te waehere pūtake, i ngā whakawhirinakitanga, i ngā tiwhikete, i ngā kōnae matua, i te hanganga-hei-waehere, i ngā whakaahua ipu, i te whirihoranga kawa me ngā hua tuatoru. Me kī pono te rārangi ingoa pono i ngā mea kāore e kitea.
Ka taea e Xygeni te āwhina i a koe ki te whakarite mō te PQC mā te whakaputa i te CBOM, te whakarōpū i ia rawa crypto mā te mōrearea kuantum, te whakarōpū i te rārangi hekenga mā te pānga HNDL, te mahere i ngā hua ki ngā tikanga whakahaere e ono, me te ripoata i te rite o ō whakawhirinakitanga i muri i te kuantum. Ngā taipitopito katoa: Te Whakatutukitanga Haumaru-Kuantum.
Ngā mea ka pakaruhia e te rorohiko matūriki — me ngā mea kāore e pakaruhia ana e ia
Ko tēnei wehewehenga te meka hangarau tino nui mō te hunga whakarongo GRC, nā te mea ka whakatau mēnā he kitenga kaupapa whakakapinga he ranei huringa whirihorangaKi te hē te mahi, ka puta he tohutohu whakatika e kore e whai hua noa iho, engari he tino kino anō hoki.
Huringa algorithm a Shor — he rauropi matū e tauwehe ana i ngā tauoti nui, ā, e tatau pai ana i ngā logarithm motuhake — e pakaru ana i te whakamunatanga kī tūmatanui o ēnei rā: RSA, ECDSA, EdDSA, Diffie-Hellman me ECDH, DSA rānei. Kei reira kāore he whakatikatika mō te rahi o te kīKāore he kī RSA 4096-bit i te haumaru ake i te kī 2048-bit ki te hoariri matūriki. Me tino rite ēnei rauropi whakakapiE pā ana hoki tēnei ki ngā momo ā-motu i hangaia i runga i te pāngarau kotahi — hei tauira, ko te SM2 o Haina he piko porowhita te āhua, nō reira he rite tonu te kitea.
Te raupaparorohiko a Grover — he rauropi rapu matū — ka whakaiti i ngā tohu whakapūmau me ngā mahi tātai, engari mā te whakaiti noa i te kaha whai hua o ēnei. Koinei whakapakeketia ki te wāhi: neke atu i te AES-128 ki te AES-256, mai i te SHA-256 ki te SHA-384, ki te SHA-512 rānei. E whakaatu tika ana te NIST IR 8547 i te whakaaro: te ōrite o te NIST standard"he iti ake te whakaraerae o ngā s ki ngā whakaeke matūriki e mōhiotia ana i te whakamunatanga kī tūmatanui standards”, ā, ko tētahi pūnaha taurite kua whakaaetia e tuku ana i te iti rawa 128 moka o te haumarutanga matarohia ka tutuki tonu i te kāwai haumarutanga muri-kuantum iti rawa a NIST.
Ko te mīhini e mahi ana i tēnei ka kiia he CRQC - a rorohiko matūriki e pā ana ki te whakamunatanga. Kei te āta whakaaro te kaupapa here tūmatanui ki tōna tūnga; e kī mārama ana te tuhinga whakatinana a te US: "Kāore anō kia mōhiotia he CRQC kei te noho, engari mā te whanaketanga tonu i roto i te ao rorohiko matū ka puta he CRQC i roto i te tekau tau e haere ake nei."
Ehara i te mea ko te taenga mai o te mīhini te mea kua rerekē — engari ko te heke haere tonu o te whakatau tata mō te nui e hiahiatia ana. I te marama o Mei 2025, i whakaputa a Craig Gidney o Google Quantum AI i tētahi whakatau tata rauemi e whakaatu ana i tērā Ka taea te whakauru i te RSA-2048 i raro i te wiki e te rorohiko kuantum me te iti iho i te miriona qubit haruru — tata ki te rua tekau ngā whakarea te hekenga mai i tana ake whakatau tata o te tau 2019 o te ~20 miriona. He whakatau tata hangarau tēnā, engari ko te whakatau tata e heke ana i te 20 ngā whakarea i roto i ngā tau e ono koia tonu te momo ia e utua ana kia aro nui ki tētahi mahi mōrearea.
Te karaka kua tīmata kē: hauhake inaianei, wetewetehia ā muri ake nei
Kohia inaianei, wetewetehia ā muri ake nei (HNDL) Ko te mahi tēnei o te hopu i ngā raraunga kua whakamunahia i ēnei rā, me te penapena kia taea rā anō e te CRQC te wetemuna. Ka hurihia he āheinga ā muri ake nei hei whakaaturanga o nāianei mō ngā mea katoa me noho muna mō ngā tau: ngā pūkete hauora, ngā kōnae ture, ngā taonga hinengaro, ngā mea ngaro a te kāwanatanga, ngā tohu whaimana roa, ngā taunakitanga kua hainatia.
Kua mutu te ārai a ngā kaiwhakahaere i tēnei. Ko te tono a te Komihana Pākehā i te marama o Hānuere 2026 ki te whakatikatika i te NIS2 e kī ana i roto i te Recital 8 "ko te āheinga o te 'hauhake inaianei - wetewete i ngā whakaekenga ā muri ake nei', tera pea kei te tupu i nāianei, me ngā mōrearea ā muri ake nei e puta mai ana i ngā whakaekenga matū ki ngā waitohu hangahanga" e whakamana ana i te whakawhiti.
Ko te hua o te whakamahere he pāngarau māmā noa iho, he tautohe kua puta mai i a Michele Mosca mai anō 2015Tāpirihia te maha o ngā tau e noho muna ai ō raraunga ki te maha o ngā tau e pau ana ki tō hekenga. Mena ka eke taua tapeke ki tua atu i te wāhi e tika ana kia noho he CRQC, kua tomuri kē koe. Mō te nuinga o ngā whakahaere whakahaere, ko te hekenga maha-tau me te tekau tau o te pupuri raraunga he nui ake i tētahi whakatau tata pono.
Ko te whakatau whakahaere a te NIST i roto i te IR 8547: "e tumanako ana kia whakaritea te nekehanga ki ngā kaupapa whakatū-kī ātete-inti-mō-te-ira ...
He aha i kiia ai tēnei he raruraru GRC i mua i tōna rironga hei raruraru whakamunatanga?
E toru ngā take e mutu ai tēnei ki runga i ngā tēpu o CISngā āpiha whakahaere ture me ngā āpiha ture, kaua e noho tahi me ngā kaihangarau crypto.
Nō te ture me ngā whakaritenga ngā rā kati, ehara i te ahupūngao. Kāore he tangata e mōhio ana āhea ka tae mai te CRQC. Ka taea e te katoa te titiro ake kei te tumanako te EU ka nekehia ngā take whakamahinga mōrearea nui i te mutunga o te tau 2030, ā, kei te tumanako te ASD o Ahitereiria ka puta te whakawhiti katoa. oti i te mutunga o te tau 2030, ā, ka whakakorehia e te NIST te RSA me te whakamunatanga pihi-porowhita i te taumata kaha haumarutanga 112-bit i muri i te tau 2030, ā, ka whakakorehia hoki ngā whakamunatanga kī-tūmatanui katoa e ngoikore ana i te irahiko i muri i te tau 2035. Ka taea te arotake i aua rā; kāore te rārangi wā irahiko irahiko.
Ko te hua tuatahi he tuhinga arotake. I mua i te whakawhiti i tētahi pūnaha, ka pātaihia e ia pūnaha te pātai kotahi: He aha te whakamunatanga kei a koe, ā, kei hea? He herenga rarangi taonga tēnā — he kawenga whakahaere me te rangatira, he arotake i te auau me ngā whakaritenga taunakitanga. Kua whakaritea tēnei e te PCI DSS mai i te marama o Poutū-te-rangi 2025, ahakoa he rahinga, kāore rānei he rahinga.
He raruraru hoko. Ko te nuinga o ngā tuhinga whakamuna i roto i tō whenua ehara i a koe. Kei roto i ngā whare pukapuka, i ngā tūāpapa, i ngā taputapu, i ngā kaiwhakarato SaaS me ngā pūnga utu. E tono ana te mahere a te EU ki ngā hinonga kia "waihanga mahere whakawhirinakitanga ... me te titiro ki ngā whakawhirinakitanga ā-roto me ngā whakawhirinakitanga tuatoru"; ka whakaputa a ASD i tētahi rārangi hoa o ngā pātai whai muri i te irahiko hei pātai ki ō kaihoko. He mahi whakahaere-kaituku e rua, ā, me whai taunakitanga e rua ka taea e koe te whakatakoto ki mua i tētahi kaitātari.
Te tureebook: he aha te mea e pā ana ki a koe
Kua whakatauhia ngā rauropi
I whakaotihia e te NIST te kaupapa matua o muri-kuantum standardi te marama o Ākuhata 2024 — ML-KEM mō ngā whakatūnga matua (Kowhi 203), A ML-DSA (Kowhi 204) me te SLH-DSA (Kowhi 205) mō ngā waitohu — nō reira kāore he "tatari mō te standardparepare "s". He KEM, arā, te tikanga whakakī-kī, ko te whakakapinga muri-inti-rauemi mō te whakawhiti kī: ka whakatūria he mea ngaro i waenganui i ngā rōpū e rua, ā, koinei te wāhanga e aukati ana i te HNDL.
E rua atu anō kei te rere: FN-DSA (FIPS 206, i ahu mai i a Falcon) kāore anō kia whakaputaina ahakoa he tauira, ā, HQC i tīpakohia i te marama o Poutū-te-rangi 2025 hei tikanga whakakī-kī tārua e ahu mai ana i te waehere, kua tuhia ki roto NIST IR 8545Kaua tetahi o rāua e aukati i tētahi mahere i tēnei rā, engari he take pai ēnei e rua hei hanga mō te tere o te mahi matihiko — te āheinga ki te whakarerekē i te raupaparorohiko mā te whirihoranga, kaua mā te tuhi anō i te waehere. Ko tēhea o ō raupaparorohiko ka waiho hei mea kua whakatakotoria i roto i te mahere whakakapinga atu ki raro.
Te rārangi wā tohutoro: NIST IR 8547
NIST IR 8547, Te Whakawhiti ki te Whakamunatanga Muri-Kuantum Standards, koinei te tuhinga e whakatauritea ana e te nuinga o ngā mahere ara, nā te mea e whakatakoto ana i ngā rā mō te whakamutua o te whakamunatanga kī tūmatanui tawhito:
He tuhipoka mō ngā waeine: ngā āhua NIST kaha haumaru, ehara i te roa o te kī. Mō ia SP 800-57 Wāhanga 1 Arotakenga 5, Ripanga 2, ko te taumata kaha 112-moka ko RSA-2048 me ngā kōpiko porowhita me te raupapa 224–255-moka (P-224); ko te taumata 128-moka ko RSA-3072 me ngā kōpiko o te 256–383 moka (P-256). Nō reira, ehara te "RSA 112-moka" i te kī 112-moka — ko te RSA-2048 tonu e whakamutu ana i te nuinga o te TLS whakaputa. Ā, ko te hononga P-256 / RSA-3072 e kitea whānuitia ana ko e kore kei roto i te peere whakakorenga o te tau 2030; kei roto i te peere whakakorenga o te tau 2035. Ka mutu ngā peere e rua ki te wāhi kotahi: i muri i te tau 2035, kāore he raupaparorohiko kī-tūmatanui e ngoikore ana i te matū i whakaaetia i tetahi rahi tawhā.
Kotahi te whakatūpato e tika ana kia mōhiotia i mua i te whakahua i roto i te urungi committī: He tauira tūmatanui tuatahi tonu te IR 8547 — i whakaputaina i Noema 2024, i kati te wā tuku kōrero i Hanuere 2025, kāore anō kia puta te putanga whakamutunga i te wā e tuhi ana. Kāore i mutu te noho hei tohutoro; ngā mahere whenua ā-motu me ngā hua kaihoko, Xygeni kei roto, whakatauritea ki taua mea. Kia mōhio hoki ki tāna ko koreKāore he kōrero mō ngā taonga, ngā kitenga, ngā mahi huna rānei. Nō hea atu aua herenga.
Te mahere ā-ao: ko wai te kī he aha, ā, āhea
E whakarāpopoto ana tēnei ripanga i te anga ture mō ia rohe:
He nui ake te uara o ngā rerekētanga e toru i te rarangi tēpu kotahi.
- E rima tau te roa o Ahitereiria i mua i ngā atu katoa. Ehara te aratohu a te ASD i te "whakaiti i ngā tawhā ngoikore i te tau 2030" — engari "kua oti te whakawhiti i te mutunga o te tau 2030", ā, e taunaki ana te ISM kia mutu te whakamahi i te whakamunatanga kore taurite tuku iho, "tae atu ki ngā rauropi whakamunatanga pērā i te Rivest-Shamir-Adleman (RSA), Diffie-Hellman (DH), Elliptic Curve Diffie-Hellman (ECDH) me te Elliptic Curve Digital Signature Algorithm (ECDSA)", i taua rā. Mena kei te mahi koe i Ahitereiria, kei te hoko atu rānei ki ngā mekameka tuku taonga a te kāwanatanga o Ahitereiria, koinā te rā herenga, ehara i te tau 2035.
- Kei te whakahaerehia e Haina tētahi ara motuhake. Kāore i whakamahia te ML-KEM me te ML-DSA; i whakahaerehia e te whare wānanga o te Tari Whakamutunga Kōrero ā-Motu tana ake karanga mō ngā rauropi arumoni o te whakatupuranga e whai ake nei, ā, ka kati ngā tuku i te Pipiri 2026, ā, standardhei whai. Mō tētahi kamupene ao whānui, ko te tikanga tēnei ko te whakamahere mō rua ngā whānau rauropi muri-inti i roto i te whenua kotahi, me te SM2 — e hangai ana ki te pihi porowhita, nō reira he rite tonu te pakaru o te Shor — hei kawenga mō te heke atu. Ka mutu te noho hei whakarāpopototanga o te kaha o te crypto-agility i konei.
- Kāore he mana whakahaere ā-motu mō te nuinga o te ao ki te PQC — ā, kāore he rerekētanga nui. I te nuinga o Amerika Latina, me te nuinga o te Middle East me Āhia-Moana-nui-a-Kiwa, kāore anō kia whakaputaina he rā kati PQC. Kei te tae tonu mai ngā herenga, mā roto i ngā hongere e toru e kore e aro ki ngā rohe: ngā kaiwhakahaere rāngai (he tohutohu ā-Hīngapoa ki ngā umanga pūtea; ngā tumanakohanga a te peeke pokapū), te whakapae standardngā mea e tono kē ana i tētahi rarangi taonga whakamuna (PCI DSS, ngā huinga mana whakahaere ISO/IEC 27001), me ngā kiritaki. Ka riro i te kaiwhakarato ki tētahi kaihoko ā-motu o te EU, Ahitereiria, US rānei tō rātou rā kati mā te kirimana.
He aha te mea e herea ai tētahi whakahaere tūmataiti
Waiho ngā mahere whenua ā-motu ki tahaki mō tētahi wā poto. Mō te nuinga o ngā whakahaere tūmataiti, e whā ngā wāhi e ahu mai ai ngā herenga whakamana, kāore i tuhia mō te quantum:
- NIS2 (Whakahau (EU) 2022/2555) e kī ana, i roto i te Ture 21(2)(h), "ngā kaupapa here me ngā tikanga e pā ana ki te whakamahinga o te whakamunatanga, ā, ki te tika, te whakamunatanga" hei mehua whakahaere mōrearea taketake. Mā te COM(2026) 13 e whakamārama te taha matū mā te tāpiri i te whakawhiti PQC ki te Ture 7(2).
- Dora - te Ture Manawanui Mahi Mamati me ōna hangarau standards, Te Ture Whakawhiwhinga a te Komihana (EU) 2024/1774E hiahiatia ana e te Ture 6 ngā hinonga pūtea kia whakauru ki roto i tā rātou kaupapa here whakamuna "ngā whakaritenga mō te whakahou, te whakarerekē rānei, mēnā e tika ana, i te hangarau whakamuna i runga i ngā whanaketanga o te tātaritanga whakamuna", ā, mēnā kāore e taea e rātou te whakahou, kia "whakamahia ngā mahi whakaiti me te aroturuki e whakarite ana i te pakari ki ngā tūmomo riri ipurangi". He herenga tere-whakamuna tēnā me te kaiwhakahaere e piri ana, ā, e whakahuatia ana i roto i ana whakaaturanga ngā whanaketanga matū.
- Whakaritenga PCI DSS v4.0 12.3.3 — koinei te mea kua rahua kētia e te nuinga o ngā whakahaere me te kore e mōhio he whakaritenga huna a te PQC. E whakaahuatia ana e te PCI SSC he "whakaritenga hou ki te tuhi me te arotake i ngā huinga me ngā kawa whakamunatanga e whakamahia ana i te iti rawa i ia 12 marama", ā, kua mutu te noho hei mahi pai rawa atu i runga i 31 March 2025Kāore he rā kati mō te PQC, kāore he rārangi rauropi irahiko — engari ko te rarangi whakamunatanga ā-tau me te mahere kua tuhia mō te urupare ki ngā huringa whakamunatanga kua whakaritea i mua.cisko ngā mana whakahaere e hiahiatia ana e tētahi kaupapa PQC, kua whai mana kē, ā, kua arotakehia kētia.
- Te rerenga hokohoko. E rua ngā rarangi ka toro atu ki tua atu i tētahi mahere whenua ā-motu. Cyber Resilience Act (Ka pā te Ture (EU) 2024/2847) mai i 11 Hakihea 2027 ā, kua hanga kē i tētahi SBOM he herenga a te kaihanga mō ngā hua he huānga matihiko — kāore e whakahau i te CBOM, engari ka whakatūria he pire rauemi ka taea te pānui e te mīhini hei taonga tutuki i ngā whakaritenga hua. Ā, i te US, EO 14412 e tohutohu ana i te Kaunihera Whakahaere Hokonga ā-Motu (FAR) kia whakaarohia he ture e hiahia ana ngā kaimahi kirimana kua hipokina kia tutuki i ngā whakaritenga NIST FIPS e whakauru ana i ngā rauropi PQC hei te 31 Hakihea 2030, me — te rārangi me te whānuitanga rawa — ngā whakahau CISMe whakaputa e A me NIST, i roto i ngā rā 270 (tata ki te 19 March 2027), "he aratohu tūmatanui e whakaahua ana i te tirohanga a ngā tari mō ngā huānga iti rawa mō tētahi pire rauemi whakamuna. Mā ēnei huānga ka taea te aromatawai aunoa i ngā rawa whakamuna e whakamahia ana e tētahi huānga taputapu, pūmanawa rānei."
He mea nui rawa atu taua mea whakamutunga i tua atu i a Washington. "Ngā huānga iti rawa mō te SBOM"kei mua i teciste āhua o te huringa o te pire rauemi pūmanawa mai i te whakaaro pai ki te taonga kirimana puta noa i te ao. Kei te ara kotahi tonu te CBOM, me aromatawai aunoa kua tuhia ki roto i te whakaritenga — e kore e ea i tētahi ripanga tātai ā-ringa.
Te hōputu: CycloneDX CBOM
CycloneDX ko te standard e hoatu ana ki te CBOM he āhua tūturu. Putanga 1.7, i tukuna i te 21 o Oketopa 2025, ā, i whakamanahia ko te ECMA-424 2nd Edition, koinei te whakahoutanga e aro ana ki te crypto: ka tāpirihia he standardrārangi whakamunatanga kua whakaritea ngā whānau raupaparorohiko me tētahi rārangi whānui o ānau elliptic, hei tautoko i ngā "arotake, arotake hanganga ture, me ngā aromatawai whakarite PQC". E whakaahua ana te CycloneDX CBOM i ngā momo rawa crypto e whā — ngā rauropi, ngā kawa, ngā tiwhikete, me ngā rauemi e pā ana pērā i ngā kī, ngā IV me ngā tote — me ngā wāhanga pūmanawa e whakatinana ana i aua mea.
He whaiti te kaupapa engari he whai hua: ina whakaputaina ngā huānga iti rawa o te CBOM, ko te CycloneDX te hōputu e kōrerohia ana e te mākete.
Te rārangi wā kua whakakotahihia
He rite tonu te āhua o te tauira i ngā wāhi katoa: te kitenga i mua i te tau 2026–2028, te hekenga mōrearea nui i mua i te tau 2030–2031, ko ngā mea katoa i mua i te tau 2035. Whakamaherehia kia rite ki taua āhua, ā, ka tino rite koe ki a rātou katoa. Kātahi ka kimihia te rā kotahi e herea ana koe tuatahi — he onge te tau 2035, ā, mō te hunga katoa i roto i te whānuitanga o te PCI DSS i tīmata te herenga rarangi taonga i te tau 2025.
Ko te hekenga tonu: he aha te mea hei whakakapi i te aha
Ko ngā rā kati he haurua noa iho o te whakamōhiotanga. Ko te haurua kē atu ko tāu e heke ana. Tuhinga o mua — ā, ehara te whakautu i te whakakapinga kotahi engari he maha, he rerekē te pakeketanga, he rerekē te rahi, ā, he tino rerekē ngā wā arahi.
Te mahere whakakapinga
ranu — te whakakotahi i tētahi pūnaha whai muri-ipurangi me tētahi pūnaha tawhito kia pakaru ai ngā mea e rua e te kaiwhakaeke — koinei te tūnga taunoa i te wā whakawhiti, ā RFC 9794 (Hune 2025) i te mutunga standardi whakarārangihia te papakupu mōna ("PQ/T ranu"). He rerekē ngā kaupapa here i konei, nō reira he pātai mana whakahaere, ehara i te hiahia hangarau: E taunaki ana te CCN o Pāniora kia ranuhia ngā waitohu e hangai ana ki te whatunga (ML-DSA, FN-DSA) me te kī kāore e hiahiatia ana e ngā kaupapa e hangai ana ki te whatunga (XMSS, SLH-DSA), ā, he whānui te pai o te tūnga o te EU ki te ranu; he rerekē te CNSA 2.0, e hiahia ana ki te PQC parakore mō ngā pūnaha haumarutanga ā-motu. Me hiahia tētahi kamupene ao whānui ki ngā whirihoranga e rua, he tautohe tēnei mō te whiriwhiri i te whirihoranga o te rauropi kaua ki te waehere.
He aha kāore he whakakapinga taka-mai
Kei a NIST standarde rua ngā mea i whakaritea: te whakakī i ngā kī me ngā waitohu mamati. He nui tēnā mō te nuinga o te whenua, ā, kāore he mea mō te toenga. Mena ka whakawhirinaki ō pūnaha ki ngā hanganga e hangai ana ki te takirua, ki te whakamunatanga e hangai ana ki te tuakiri, ki te āhuatanga rānei, ki te paepae, ki ngā waitohu matapo, ki ngā waitohu rōpū rānei, ki ētahi atu whakamunatanga taumata kawa matatau rānei, kāore he rite kua whakaaetia mō te hekenga ki tēnei rā - ko te whakautu pono ko te tautuhi i aua whakamahinga inaianei, te tohu i a rātou kāore anō kia whakatauhia, me te hoahoa i tētahi putanga kaua e tatari mō tētahi standardE pā ana hoki tēnei ki ngā pūtake pūmārō o te whakawhirinaki: ka neke ngā HSM (ngā kōwae haumarutanga pūmārō), ngā TPM me ngā kāri atamai i ngā huringa whakahou silicon he roa ake i te matapihi ture.
Ehara i te kotahi te hekenga, engari he maha me ngā wā arahi rerekē
Koinei te wāhi e whakarerekē ai te mahere whakakapinga i te rārangi wā rite. Kāore i te ōrite te raupapa o te akiaki me te raupapa o te wā arahi, ā, ka ngaro i tētahi wā kati te mahere i hangaia i runga i tētahi o aua mahere anake.
- Ngā raraunga e tukuna ana — te whare matua. Ko te mea tino akiaki (ko te mata HNDL) me te haehae te wā ārahi: mō te nuinga o ngā puranga he whakapai ake i te whare pukapuka me te huringa whirihoranga. He mea mārama hoki te whakahaere — i pūrongohia e Cloudflare i roto i October 2025 neke atu i te haurua o ngā waka i tīmatahia e te tangata ki tana whatunga kua whakamahi kē i te whakaaetanga kī muri-ipurangi. Kei tō taha te āputa o te hononga: ~39% noa iho o ngā tūmau tukutuku tūmatanui 100,000 o runga i tautoko, me te 3.7% o ngā tūmau takenga mai i muri i a Cloudflare. Kei runga ngā tatauranga o nāianei Radar Cloudflare. Tīmata i konei, whakaoti wawe.
- Waehere, pūmanawa me te waitohu whakaara-haumaru. He iti te hiahia mō te HNDL — kāore tetahi e kohi i tētahi waitohu — engari he roa te wā e tatari ana, ā, he wawe te rā kati, nā te mea me manatoko tonu ngā waitohu e tētahi taputapu i tukuna i te tau 2027 i te tau 2040, ā, he tekau tau neke atu te roa o ngā pakiaka waitohu. standardKua rite (SP 800-208, SLH-DSA); nā CNSA 2.0 me te CCN o Pāniora i whakanoho te waitohu pūmanawa ki mua o te rarangi mō tēnei take tonu. Tīmata inaianei ahakoa te iti o te hiahia ki te akiaki.
- PKI me ngā tiwhikete. Kāore koe e whakahaere i tēnei kaupapa. Kāore i te tumanakohia kia wātea whānuitia, kia whakawhirinakihia hoki ngā tiwhikete muri-inti i roto i ngā pūtirotiro puta noa i mua i te tau 2027, kāore anō kia whakatauhia ngā whakatakotoranga tiwhikete ranu i te IETF tae noa ki te mutunga o te tau 2025, ā, ka piki haere te rahi o te mekameka. Whakamātauria me te tahua; kaua e oati ki tētahi rā ehara i a koe.
- Ngā raraunga kua okioki me ngā pūranga roa te ora. He pai te whakamunatanga nui — he huringa tawhā te AES-256. Kei roto i te hierarki kī i runga ake nei te whakaaturanga: te takai kī me te kawe kī e whakamahi ana i te RSA, i te ECDH rānei. He puhoi ngā kaupapa whakamunatanga anō, ā, e pā ana ki ngā tārua, ngā pūranga me te penapena.
- Ngā pūnaha tāmau, OT (hangarau whakahaere - pūnaha ahumahi me te whakahaere) me ngā pūnaha tuatoru. He roa ake ngā huringa whakahou i te wā e hiahiatia ana, me ētahi rawa kāore e taea te neke. Mō rātou, ko te whakautu he whakakapinga, he whakahaere utu, he mōrearea kua tuhia, kua whakaaetia rānei — ā, ko te wawe o te whakaingoatanga, ko te iti ake o te utu mō ia o aua kōwhiringa.
E rua ngā hua whai hua mō tētahi mahere GRC. Tuatahi, whakamuri i tō rā herenga tuatahi mā te wā arahi, kaua mā te kaute mōrearea anake: mā te rārangi mahi kua whakarārangihia koe e kī ana ko ēhea te mea hei whakatika tuatahi i roto i ngā mea e tika ana kia mahia e koe taea whakatika wawe; mā te rārangi wā-arataki koe e tohutohu ki te mea hei mahi tīmatanga tuatahi ahakoa. Tuarua, me tuhi te rārangi taonga i te tauira whakamahinga, kaua ko te raupaparorohiko anakeKāore e taea te whakamahi i te "RSA-2048 i roto i tēnei putunga raraunga"; he kaupapa rerekē e rua te "RSA-2048 e whakamahia ana mō te kawe matua i roto i tētahi ratonga e anga ana ki te marea" me te "RSA-2048 e whakamahia ana hei waitohu i te pūmanawa" me ngā whāinga rerekē e rua, ngā rā kati rerekē e rua, me ngā rangatira rerekē e rua. Koia te take me hopu e te rarangi taonga te akomanga taketake me te mata i kitea ai te whakamunatanga, kaua ko te ingoa raupaparorohiko anake - ā, he aha te take he uaua ake te hanga i tētahi i te ahua.
He aha te uaua o te whakarite mō te PQC: kei ngā wāhi katoa te whakamunatanga
Ka tonoa tuatahitia e ia kāwanatanga te rarangi taonga nā te mea ko te rarangi taonga te wāhanga uaua. Ka kitea tēnei e ngā whakahaere i te wā tonu ka whakamātau rātou.
Te wāhi e huna ai te whakamunatanga
- Waea atu ki ngā pae i roto i tō ake pūtake — he tohu huna i hangaia i roto i tētahi ratonga, he tohu tātai i whiriwhiria i roto i tētahi akomanga whaipainga, he kōpiko i whakaingoatia i roto i tētahi mahi hainatanga. E waru ngā reo i roto i te kotahi monorepo, arā, e waru ngā huinga kīwaha.
- Ngā taunga — ko te nuinga o ngā mahi crypto i roto i te nuinga o ngā tono ka whakahaerehia e ngā whare pukapuka kāore i whiriwhiria e te tīma: BouncyCastle, OpenSSL, libsodium, node-forge, PyCryptodome, Tink. Ko te raupaparorohiko e whakahaerehia ana he āhuatanga nō te whare pukapuka, ehara i te mea nō tō waehere.
- Ngā Tiwhikete me ngā rauemi matua — Ngā tiwhikete X.509 kua tirohia ki roto i ngā putunga raraunga, ngā kōnae matua PEM i roto i ngā whaiaronga whirihora, ngā putunga raraunga matua kua tāpirihia ki roto i ngā whakaahua.
- Te hanganga-hei-waehere me te whirihoranga kawa — he putanga TLS iti rawa i roto i tētahi kōwae Terraform, he rārangi huinga tohu huna i roto i tētahi pūmana whakauru, he whirihoranga SSH i roto i tētahi ahua turanga.
- Ngā whakaahua ipu me ngā pūrua kua whakahiatohia — ngā whare pukapuka matihiko e honoa ana ki ngā paparanga kāore e pānuihia e te matawai pūtake a tetahi.
- Ngā hua a te hunga tuatoru me te SaaS — te moni matihiko e kore e kitea, e whakarerekētia rānei, me pātai noa atu.
- Ngā HSM, ngā ratonga whakahaere matua me ngā taputapu whatunga — te moni matihiko e noho ana i waho rawa o te pūmanawa.
Ngā mea e whā e hanga ana i tēnei hei kaupapa, ehara i te matawai
Te kapinga pono. He taunakitanga anake te rarangi taonga mēnā e whakaatu ana i ōna ake rohe. "I matawaihia e mātou te pūtake, ngā whakawhirinakitanga, ngā tiwhikete, ngā kōnae matua me IaC whirihoranga; kāore mātou i matawai i ngā waka wā-oma, ngā rūrū a TLS, ngā ihirangi HSM, ngā rua kua whakahiatohia, ngā paparanga ipu rānei" he tūranga tiaki. Ko te tau kāore he tauwehe, ehara i te mea pera.
Te whakarāpopototanga, ehara i te whakarārangi. He mano tini ngā kitenga crypto e puta mai ana i tētahi whenua nui. Kāore e taea te whakamahi i tētahi rārangi papatahi. Ko te whakarōpūtanga e whai tikanga ana e whakakotahi ana i ngā mea e whā: ko te raupaparorohiko kua pakaru-Hor, kua ngoikore-Grover rānei; kia pēhea te roa o te noho muna o ngā raraunga e tiakina ana e ia (te take HNDL); kei te whakaatuhia ki tētahi whatunga; ā, kei te taea te toro atu mā te whakahaere waehere kaua ki te noho i roto i tētahi taputapu whakamātautau, i tētahi tauira rānei kua hokona. Ko ia mahere e kī ana "ngā take whakamahinga mōrearea nui i te tuatahi" kei te whakaputa i tētahi tohutohu matua, ā, kāore e taea e koe te whakautu mai i tētahi rārangi pīpāpā.
Te ngāwari, ehara i te whakakapinga anake. E ai ki te mahere whakakapinga, kei te neke tonu te huinga whāinga, ā, he rerekē ngā ture ranu i ia rohe — ehara te whakawhiti ka mahia e koe i te tau 2027 i tō whakamutunga. Ko ngā ingoa rauropi kua whakapūmautia, ko ngā huinga tohu matihiko kua pinea, ko te kore whakarāpopototanga kaiwhakarato me ngā putanga kawa kore e taea te whiriwhiri koia ēnei te mea e huri ai te muri whakawhiti ki tētahi atu kaupapa maha-tau. He kitenga anō ēnei, he iti te utu hei whakatika i nāianei, he nui te utu hei whakatika i muri mai.
Te mekameka tuku. Kāore e taea e koe te heke tere atu i tō pūnga puhoi rawa atu. Ko tēhea o ō whakawhirinakitanga e tautoko ana i te PQC, e tuku ana i ngā aratau ranu, kua whakaputa i tētahi mahere ara, e whakaputa ana i tētahi CBOM — e whakatau ana i tō ara matua, ā, koinei hoki te taunakitanga e hiahiatia ana e te tīma hoko i raro i ngā herenga mōrearea-kaituku NIS2 me DORA.
Tētahi atu mahanga: he mana whakahaere te rarangi taonga, ehara i te kaupapa
Ko te tikanga he whakahaere i tētahi mahi kimicise, hangaia he ripanga tātai, ka tukuna ki roto i te kōnae. Kua aukatia kētia e te PCI DSS tēnā me tana huringa arotake tekau mā rua marama; kua kati te CCN o Pāniora i tana rārangi arowhai hekenga me te "whakahou i te rarangi o ngā rawa whakamuna me ō rātou whakawhirinakitanga"; ā, he tino tika ake te tuhinga whakatinana a te US:
I runga i te whānuitanga me te uaua o ngā taiao hangarau mōhiohio ā-Motu, he maha ngā wā kāore e ranea ngā huarahi ā-ringa ki te kimi me te whakahaere i te whakamunatanga. Me whakamahi ngā tari i te aunoatanga ina taea, ina tika hoki, kia tutuki ai he māramatanga whānui me te whakahou tonu mō tā rātou tūnga whakamunatanga. He mea nui te aunoatanga mō te whakahaere rawa, te whakatinana i ngā kaupapa here, me te pūrongo ture.
Ngā nekehanga whakamunatanga: ka tāpirihia e te kaiwhakawhanake he whare pukapuka, ka hurihia he ahua turanga, ka tukuna he ratonga hou me te huinga whakamunatanga taunoa. Ko te rarangi taonga ka whakahoutia i runga i ia hanganga he mana whakahaere; ko te mea ka whakahoutia ā-ringa i ia tau he kaupapa keriwhenua ka mahi tonu koe ake tonu atu.
Te tikanga o te "PQC rite" i roto i te mahi
Whakakorea te reo o te kaihoko, ā, ko te rite o te PQC ko te kaha ki te whakaputa i ngā mea e ono i runga i te tono:
- He rarangi taonga whakamuna i roto i te standard whakatakotoranga ka taea te pānui e te mīhini, e kapi ana i ngā mata e kitea ana e koe, ka hangaia anō aunoa.
- He whakarōpūtanga mōrearea o ia rawa kei roto: me whakakapi (Shor-broken), ka taea te whakapakeke ki tōna wāhi (Grover-weakened), kua haumaru rānei i te matū kuantum.
- He rarangi hekenga kua whakarārangihia e whakaata ana i te roa o te ora o ngā raraunga, te whakaaturanga me te taea te toro atu — nō reira "ko ngā take whakamahinga mōrearea nui te tuatahi" te kawenga.
- He tauākī kapinga e whakaingoa mārama ana i ō wāhi matapo.
- Nga taunakitanga tautukunga kua maheretia ki ngā tikanga e herea ana koe, me ō rātou rā.
- He tirohanga mō te rite o te mekameka tuku e kī ana ko ēhea ngā awa whakarunga e aukati ana i tō hekenga.
He mea nui ngā mea katoa atu — te hurihanga matua, te huringa ora o te tiwhikete, te whakarite HSM, te kimi whatunga — engari kei raro iho i ēnei e ono. Kāore e taea te huri i te mea kāore anō kia kitea e koe.
Te āwhina a Xygeni
Xygeni's Te Whakatutukitanga Haumaru-Kuantum ka puta katoa ngā ono mai i te matawai kua rere kē i roto i tōu kaha pipelineKāore he hua motuhake mō te whenua matihiko, kāore he kaihoko, kāore he huringa ki te āhua o tō hanga — ka haere tahi te kitenga matihiko me te SCA (tātari hanganga pūmanawa — te matawai whakawhirinakitanga), SAST (whakamātautau haumarutanga tono tūmau — te matawai waehere pūtake) me IaC tātaritanga kei a koe kē.
1 · Te CBOM. Ka tukuna e Xygeni he CycloneDX CBOM e kapi ana i ngā momo rawa crypto e whā — ngā rauropi, ngā kawa, ngā tiwhikete me ngā rauemi e pā ana pērā i ngā kī me ngā tote — puta noa i a Java, Kotlin, JavaScript/TypeScript, Python, Go, C#, PHP me Swift, ā, ka hono i ia rauropi ki te whare pukapuka e whakatinana ana i a ia. Ko ngā rawa Crypto he taonga rarangi tino pai i runga i te tūāpapa, me ngā wāhanga, ngā ngoikoretanga, ngā mea ngaro me IaC ngā kitenga, nō reira he rite tonu te pūtake me te hītori. Kāore ngā rauemi matua e whakaurua ki te rarangi taonga — ko tōna aroaro, te momo me te tauwāhi anake.
2 · Te whakarōpūtanga mōrearea-rauemi. Kua tohua ia rawa pakaru-poto (kī-tūmatanui, me whakakapi), ngoikore te tipu (he ōrite, he rite rānei, ka taea te whakapakeke i te wāhi kotahi) rānei haumaru-pqc, ā, kua tohua mō te pānga ki te HNDL. Ko te rerekētanga kotahi te mea e akiaki ana i te SAST tohutohu whakaora, e peka ana ki te akomanga taketake: ka "neke atu a RSA me ECC ki ML-KEM, ki ML-DSA rānei, me te hanganga ranu i te wā whakawhiti", ko AES-128 me SHA-256 ka "whakanui ake i te kī, i te rahi rānei o te keri". He mea āta whakaarohia tēnei — he kino ake te tohutohu i tētahi kī RSA nui ake hei ārai i tētahi hoariri matūriki i te kore kōrero noa, ā, ko tētahi taputapu e whakakotahi ana i ngā take e rua ka mahi i tēnā.
3 · Te rārangi hekenga kua whakarārangihia. Engari i te rārangi papatahi, ka tohua e Xygeni ia rawa ngoikore-pūnaha mai i te 0–100 mai i te ngoikoretanga pūnaha, te roa o te ora me te aro o ngā raraunga, te tūponotanga o te whatunga, te taea te toro atu me te uara pakihi, ā, ka puta he rārangi mahi kua whakarārangihia. Koinei te mea e huri ai i ngā "take whakamahinga mōrearea nui i te tau 2030" mai i te pepeha hei rarangi mahi.
4 · Te mahere kapinga. Ka ripoatahia e Xygeni ngā mea i tirohia e ia me ngā mea kāore i tirohia e ia: te waehere pūtake, ngā tiwhikete, te tohu whakawhirinakitanga, ngā kōnae kī tūmataiti me IaC ka whakarārangihia ngā whirihoranga hei mea kua hipokina, he wāhanga, he kore rānei i matawaihia, me te wā whakahaere me te waka whatunga, ngā ringaringa TLS, ngā ihirangi HSM me KMS, ngā rua kua whakahiatohia me ngā whare pukapuka paparanga-ipu kua whakahuatia māramatia hei wāhi matapo. Ka pai te urupare a ngā kaitātari ki tētahi taputapu e kī ana i ōna ake rohe; nō reira, i roto i ō mātou wheako, kāore CISKo koe.
5 · Ngā taunakitanga tutuki i ngā whakaritenga. Ka arotakehia e te miihini tutuki ture te rarangi moni matihiko ki ngā tikanga e ono, ā, ka whakahokia mai ngā whakataunga kua paahitia, kua hapa, kua kore rānei e tutuki ki ō rātou rā kati tuturu: NIST IR 8547, NSA CNSA 2.0, te Mahere Ara o te EU PQC, me ngā huinga iti muri-ipurangi o PCI DSS 4.0, Dora a NIS2Kei roto tēnei i te matawai hanganga ture kotahi me te CIS Paearu mekameka tuku pūmanawa, OWASP SCVS me OpenSSF standards, nō reira ka ripoata te tūnga PQC mā te hongere kotahi me te toenga o tō hanganga ture mekameka tuku pūmanawa. Ka taea e ngā whakahaere nō hea atu te rā kati here — ASD, CCCS, CCN — te mahi mai i ngā taunakitanga kotahi, nā te mea kei runga aua mahere i te anga 2030/2035 kotahi; ko te rā otinga o Ahitereiria i te mutunga o te tau 2030 anake me whai motuhake.
6 · Te rite o te mekameka tuku. He āhuatanga rite tonu kei ia whakawhirinakitanga - e tautoko ana i te PQC, e tuku ana i ngā aratau ranu, he mahere mahi kua whakaputaina - kia kite ai koe ko ēhea ngā putanga whakarunga e tū ana i tō ara matua, me te whakaputa i tētahi tirohanga rite tonu mō te kaihoko mō te hoko.
I tua atu i ngā mea e ono: ngā kitenga o te tere o te mahi huna. Ka tohu hoki a Xygeni i ngā tauira e hanga ana i te muri te hekenga he tuhi anō — he kōwhiringa raupaparorohiko me te pihi kua whakapūmautia, he whakarāpopototanga kaiwhakarato ngaro, he huinga tohutoro tawhito kua whakapirihia, he putanga kawa kore e taea te whiriwhiri. Ka taea te whakamana i te crypto ngoikore me te ngoikore-quantum mā te paparanga kaupapa here kotahi me te toenga o ō kitenga, kia taea ai te hopu i tētahi raupaparorohiko hou-kupenga-Short-broken i roto i te pull request kaua i roto i te arotake o te tau e tū mai nei.
Take take
- Kimihia te rā here tōmua rawa atu i mua i te whakamahere i tetahi mea. Ko te nuinga o ngā mahere ara e aro ana ki te tau 2030 mō ngā mea mōrearea nui, me te tau 2035 mō ngā mea e toe ana — engari e matapaetia ana e Ahitereiria katoa i oti te whakawhiti i te mutunga o te tau 2030, ā, ka tīmata a PCI DSS ki te tono mō te rarangi taonga i te tau 2025.
- Whakamaherehia kia rite ki te āhua, kaua ki te mana whakahaere. Ka kitea i mua i te tau 2026–2028, ka hekenga mōrearea nui i mua i te tau 2030–2031, ka oti i mua i te tau 2035. Whakahāngaihia kotahi, ā, ka tutuki i a koe te nuinga; aroturukihia motuhaketia ngā tūponotanga.
- Tīmata ki te rarangi taonga, nā te mea ka tonoa tuatahitia e te katoa — e tuwhera ana te EU, Pāniora, Kānata, Ahitereiria, te MAS o Hingaiapore me te PCI DSS me te tuku kotahi.
- Whakamahia te CBOM hei hōputu. E taunaki ana te mahere a te EU kia whakahuatia tōna ingoa; ka tae mai te aratohu a te US mō ngā huānga iti rawa o te CBOM i te marama o Poutū-te-rangi 2027, ā, e hiahiatia ana kia puta... aunoa aromatawai
- Kaua rawa e whakakotahi i a Shor rāua ko Grover. Me whakakapi te kī tūmatanui; me whakapakeke te kī ōrite me te kī taupatupatu. Ko ngā tohutohu whakatika e whakararuraru ana i ēnei, he kino atu i te kore tohutohu.
- Mā te HNDL e whakatakoto tō rā kati tuturu. Ko ngā raraunga me noho muna tae noa ki te tau 2035 kua huraina i ēnei rā. Whakatairangahia ngā mea matua — TLS, IKE, tetahi mea e tiaki ana i ngā raraunga e tukuna ana — kaua ko ngā waitohu.
- Whakaritea mā te wā arahi, kaua mā te mōrearea anake. He mea tere te whakatūnga o ngā kī; ehara i te mea tere te hainatanga pūmanawa me te PKI engari he puhoi, ā, me tīmata tuatahi ngā mea puhoi. Ko ngā mea kāore e taea te neke — ngā taputapu tawhito, ngā hua tuatoru kua tio — me whakaingoa i tēnei tau, nā te mea ko te whakakapinga anake te kōwhiringa e toe ana, ā, me whai huringa tahua.
- Tuhia te tauira whakamahinga, kaua ko te raupaparorohiko anake. He kaupapa rerekē te RSA e tiaki ana i te rūrū ringa TLS me te pūmanawa hainatanga RSA, he rerekē ngā whāinga, ngā rā kati me ngā rangatira. Kāore e taea e te rarangi ingoa e whakarārangi ana i ngā ingoa raupaparorohiko anake te akiaki i te hekenga.
- Tonoa he mahere kapinga pono. He nui rawa te hoko a te taputapu e kī ana ka kitea katoatia te whakamunatanga mai i te matawai pūtake. Ko te mea kāore e kitea e ia he mea nui ki te kaitātari, pērā i te mea ka taea e ia.
- Hangaia mō te hekenga tuarua. Kāore te FIPS 206 i te whakamutunga, kāore hoki te HQC i te whakamutunga standardkua whakanuia, ā, ko Haina me Korea standardte whakarite i ō rātou ake whānau. Ka pupurihia e tētahi whenua ao whānui neke atu i te kotahi te huinga rauropi muri-inti; he iti te utu o ngā kitenga crypto-agility i nāianei, ā, he nui te utu i te tau 2031.
- Aunoatia, tāruatia rānei. He mana whakahaere te rarangi tuhinga whakamuna i hangaia anōtia mō ia hanganga. He whakaahua poto te ripanga tātai e tīmata ana te nekeneke i te rā i hainatia ai.
Hei panui atu
Kei roto i te tuhinga a Xygeni ngā taipitopito hangarau katoa — ngā mea i kitea, te mahi a te whakarōpūtanga mōrearea-pūmua me te whakatauranga matua, ngā mea e arotakehia ai ia tikanga tutuki, me pēhea te tiki i ngā pūrongo:
- Xygeni: "Te Whakatutukitanga Haumaru-Kuantum". Ngā Tuhinga Xygeni."
- Xygeni: "Hangaia he CBOM me te Xygeni CLI". Ngā Tuhinga Xygeni."
- Xygeni: "Te tutuki i ngā whakaritenga i tautokona standards". Ngā Tuhinga Xygeni."
Standardngā me ngā rauropi:
- NIST: "IR 8547 (Tauira Tūmatanui Tuatahi): Te Whakawhiti ki te Whakamutunga-Mua-Kuantum Standards". Whiringa-ā-rangi 2024."
- NIST: "FIPS 203 (ML-KEM)","FIPS 204 (ML-DSA)","FIPS 205 (SLH-DSA)". Ākuhata 2024."
- NIST: "IR 8545: Pūrongo Tūnga mō te Wāhanga Tuawhā o te NIST PQC StandardTukatuka". Maehe 2025."
- NIST: "SP 800-57 Wāhanga 1 Arotakenga 5: Taunakitanga mō te Whakahaere Matua"— Ripanga 2, ngā kaha haumarutanga rite tonu.
- NIST: "SP 800-208: Taunakitanga mō ngā Kaupapa Waitohu e Hangai ana ki te Hash ā-Motu"(LMS, HSS, XMSS, XMSS^MT). Oketopa 2020.
- IETF: "RFC 9794: Ngā Kupu mō ngā Kaupapa Ranu Tuku Iho i muri i te Kuantum". Pipiri 2025."
- Cloudflare: "Te āhua o te Ipurangi muri-kuantum i te tau 2025"me ngā raraunga whāngai ora i runga i"Radar Cloudflare".
- CycloneDX: "Pire Rauemi Whakamunatanga (CBOM)"A"Tukunga CycloneDX v1.7". Oketopa 2025."
Ngā mahere whenua ā-motu me ā-rohe:
- ASD (Ahitereiria): "Te whakamahere mō te whakamunatanga muri-iwi". Hepetema 2025."
- Rōpū Mahi Tahi a NIS: "He Ara Whakatinanatanga Whakaritea mō te Whakawhiti ki te Whakamunatanga Muri-Kuantum". Pipiri 2025."
- CCN (Pāniora): "CCN-TEC 009 / BP-37 — Recomendaciones for una transición postcuántica segura". Hūrae 2026."
- Te Komihana o Ūropi: "Taunakitanga a te Komihana (EU) 2024/1101"(11 Paenga-whāwhā 2024) me "COM(2026) 13 — Te tono whakatikatika i te Aratohu (EU) 2022/2555 (NIS2)"(20 Hanuere 2026).
- NCSC (UK): "Ngā wātaka mō te hekenga ki te whakamunatanga muri-iwi". Maehe 2025."
- Te Pokapū Haumarutanga Ipurangi o Kanata: "He mahere ara mō te hekenga ki te whakamunatanga muri-iwi mō te Kāwanatanga o Kanata (ITSM.40.001)". Pipiri 2025."
- Te Whare Mā: "Te Whakataunga Whakahaere 14412 — Te Whakamarumaru i te Motu mai i ngā Whakaekenga Matatini Matatau"(22 Pipiri 2026) me te OMB"M-26-15"(24 o Hune 2026).
- NSA: "Ngā Rauemi Haumarutanga Ipurangi i Muri i te Quantum (CNSA 2.0)".
- CRYPTREC (Hapani): "CRYPTREC"— I tāpirihia a ML-KEM ki te Rārangi Tūmataitinga i Manakohia, Maehe 2026.
- MAS (Hīngapōro): "He Tohutohu mō te Whakatika i ngā Mōrearea Haumarutanga Ipurangi e Pā Ana ki te Quantum". Hui-tanguru 2024."
- NZISM (Aotearoa): "Te Whakarite mō te Whakamunatanga Muri-Kuantum".
- ICCS (Haina): "Te Whare Wānanga o te Whakamunatanga Tauhokohoko Standards"—he kaupapa rauropi whakamunatanga arumoni o te whakatipuranga e whai ake nei."
- ITI (Brazil): "ITI publica Instrução Normativa que incorpora algoritmos pós-quânticos à ICP-Brasil". Henerei 2026."
Ngā herenga ā-rāngai me ngā herenga whakapae:
- EU: "Arataki (EU) 2022/2555 (NIS2)“; "Ture (EU) 2022/2554 (DORA)“; "Te Ture i Tukuna e te Komihana (EU) 2024/1774 (ROA whakahaere mōrearea ICT RTS)“; "Ture (EU) 2024/2847 (Ture Manawanui Ipurangi)".
- Haumarutanga PCI Standardte Kaunihera: "Whakarāpopototanga o ngā Huringa mai i te PCI DSS v3.2.1 ki te v4.0"(whakaritenga 12.3.3).
Papamuri:
- Craig Gidney: "Me pēhea te tauwehe i ngā tauoti RSA 2048 moka me te iti iho i te miriona qubit haruru". Google Quantum AI, Mei 2025."
- Michele Mosca: "Te haumarutanga ipurangi i tētahi wā e whai rorohiko matūriki ana: ka rite rānei tātou?". IACTānga-anō 2015/1075.
