后量子密码学——为什么它安全可靠.pdf

1、POST-QUANTUMCRYPTOGRAPHY:WHY ITS SECUREKONSTANTINOSKARAGIANNISDIRECTOR,QUANTUMCOMPUTINGSERVICESMAY14,2025 2025 Protiviti Inc.An Equal Opportunity Employer M/F/Disability/Veterans.Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements o

2、r offer attestation services.All registered trademarks are the property of their respective owners.Helping companies get ready for quantum opportunities and threats.Involved in the QC industry since 2012,and in InfoSec since the 90s.Speaker at RSA,Black Hat,DEF CON,ISF,and over a hundred conferences

3、 worldwide.Host of The Post-Quantum World podcast.Konstantinos KaragiannisKonstantinos KaragiannisDirectorDirectorQuantum Computing ServicesQuantum Computing ServicesTHREATS TO CRYPTOGRAPHYSymmetric Public Key/Asymmetric FactoringBrute-Force SearchTYPES OF PQCIsogeny-Based Cryptography Hash-Based Si

4、gnaturesMultivariate Cryptography Code-Based Cryptography 2+2+2 010010010100100 Lattice-Based Cryptography#FIRST NIST PQC STANDARDSPublic Key Encryption/KEMMLML-KEMKEMModule-Lattice-Based Key-Encapsulation Mechanism Standard(Formerly CRYSTALS-Kyber)FIPS 203Digital SignaturesMLML-DSADSAModule-Lattice

5、-Based Digital Signature Standard(Formerly CRYSTALS-Dilithium)FIPS 204SLHSLH-DSA DSA Stateless Hash-Based Digital Signature Standard(Formerly SPHINCS+)FIPS 205Next KEM will be HQC.BIKE and Classic Next KEM will be HQC.BIKE and Classic McElieceMcEliece not selected yet.not selected yet.SIKE eliminate

6、d.SIKE eliminated.Signatures coming:FALCON and others Signatures coming:FALCON and others LATTICE BASICSLEVEL 5 ML-KEM HAS 4 DIMENSIONS2 DIMENSIONSBUILT ON X,Y AXISBASIS VECTORSBAD BASIS VECTORSMATRICES AND VECTORSCOORDINATES ARE POLYNOMIAL