AWS post-quantum cryptography migration plan
Amazon Web Services is migrating to post-quantum cryptography in phases, starting with untrusted networks, implementing NIST's standardized algorithms, and encouraging customers to adopt TLS 1.3 for software updates.
Read original article
Amazon Web Services (AWS) is initiating a migration to post-quantum cryptography (PQC) to enhance data security against potential threats posed by quantum computing. This transition will occur in phases, starting with systems that communicate over untrusted networks. AWS has been actively involved in the development of new public-key cryptographic algorithms resistant to quantum attacks, collaborating with industry leaders and government agencies. The National Institute of Standards and Technology (NIST) recently standardized three PQC algorithms, which AWS plans to implement for long-term support. The migration strategy includes four workstreams: assessing existing systems, integrating PQC algorithms into public AWS endpoints, enabling PQC signing algorithms for long-term digital signatures, and adapting these algorithms for session-based authentication. AWS emphasizes the importance of encryption in transit, particularly for public key cryptography, while maintaining that existing symmetric encryption methods remain secure. Customers are encouraged to prepare for this transition by ensuring their software can be updated and adopting TLS 1.3, which supports PQC. AWS has already begun deploying PQC through its open-source cryptographic library and plans to align its services with evolving industry standards.
- AWS is migrating to post-quantum cryptography to enhance data security.
- The transition will occur in phases, starting with untrusted network communications.
- Three PQC algorithms have been standardized by NIST and will be implemented by AWS.
- Customers are advised to adopt TLS 1.3 and ensure their software can be updated.
- AWS is already deploying PQC in its open-source cryptographic library.
Related
Quantum is unimportant to post-quantum
Post-quantum cryptography gains attention for its enhanced safety and flexibility over classical methods. Transitioning to PQ standards addresses risks from potential quantum advancements, aiming to improve cryptographic security proactively.
NIST Announces Post-Quantum Cryptography Standards
The U.S. NIST has standardized three post-quantum cryptography schemes to protect against quantum computer vulnerabilities, with a fourth expected in 2024, emphasizing urgent and complex transition needs for data security.
Cryptographic Right Answers: Post Quantum Edition
Post-quantum cryptography is essential as quantum computers threaten classical systems. NIST is standardizing algorithms, but challenges include differing properties, larger key sizes, and the need for a hybrid security approach.
What Is Post-Quantum Cryptography? – NIST
Post-quantum cryptography aims to secure data against quantum computer threats. NIST is developing standards for algorithms resistant to quantum attacks, ensuring protection for sensitive information in the future.
Show HN: PQC.club – Post-Quantum Cryptography Tools and Alternatives
PQC Club offers tools for transitioning to post-quantum cryptography, featuring applications like Tuta and Signal, browser support from Chromium and Firefox, and hybrid key exchange options from Cloudflare and AWS KMS.
0 commentsRelated
Quantum is unimportant to post-quantum
Post-quantum cryptography gains attention for its enhanced safety and flexibility over classical methods. Transitioning to PQ standards addresses risks from potential quantum advancements, aiming to improve cryptographic security proactively.
NIST Announces Post-Quantum Cryptography Standards
The U.S. NIST has standardized three post-quantum cryptography schemes to protect against quantum computer vulnerabilities, with a fourth expected in 2024, emphasizing urgent and complex transition needs for data security.
Cryptographic Right Answers: Post Quantum Edition
Post-quantum cryptography is essential as quantum computers threaten classical systems. NIST is standardizing algorithms, but challenges include differing properties, larger key sizes, and the need for a hybrid security approach.
What Is Post-Quantum Cryptography? – NIST
Post-quantum cryptography aims to secure data against quantum computer threats. NIST is developing standards for algorithms resistant to quantum attacks, ensuring protection for sensitive information in the future.
Show HN: PQC.club – Post-Quantum Cryptography Tools and Alternatives
PQC Club offers tools for transitioning to post-quantum cryptography, featuring applications like Tuta and Signal, browser support from Chromium and Firefox, and hybrid key exchange options from Cloudflare and AWS KMS.