Quantum-Resistant Cryptography in Practice

forthcoming

QARC is a targeted proposal that aims at the practical deployment of post-quantum cryptographic (PQC) technologies into real-world applications and infrastructures. It is focused on implementing PQC to open-source software and on specific platforms, such as embedded constrained devices and hardware platforms, such as Field Programmable Gate Arrays (FPGAs). For these platforms, where secure implementations of PQC algorithms are still lacking, the consortium will develop novel prototypes and evaluate them in realistic pilots designed in collaboration with National Cyber Security Authorities (NCSAs). The focus will be devoted to 1) the design and implementation of hybrid schemes guaranteeing security even if legacy or some PQC families fail, 2) cryptographic agility providing easy cryptographic updates, and 3) implementation security and resistance to side-channel attacks. Using secure implementations, pilots on eGovernment, Cloud infrastructures, NCSAs’ services, and open-source software will be run across the EU to obtain exemplary deployment strategies and create good practices for the transition from legacy to PQC cryptography. A major component of QARC is the strong involvement of National Cyber Security Authorities as consortium partners. This will ensure coordinated transition strategies and aligned national roadmaps. The project includes activities for building the NCSA network, creating policy briefs, conducting comparative studies of multiple roadmap implementations in different countries, identifying lessons learned, and facilitating scientific, commercial, and community support in these transitions. A particular focus is given to small-to-medium countries with agencies with limited resources. In addition to technical tasks, the QARC project also includes activities focused on standardization and legislation updates and the training and awareness-raising activities that are necessary components of successful PQC transition.