6 Steps to Migrate to NIST's Post-Quandum Standards
NIST's Post-Quantum Standardization process is in its third round. As we are getting closer to new standards, the question that arises is: how can we migrate to those new standards? This is one of the central topics of NIST in the past few months, publishing whitepaper(s) and holding themed conferences.
As the Principal Crypto Technologist at InfoSec Global, I have taken part in NIST’s conference as well as other conferences in the last few weeks. We have developed a concrete roadmap to answer both how to migrate to those new standards, in addition to what those new standards are.
The steps in ISG’s roadmap are as follows:
- Create a complete inventory of your cryptography.
- Identify today's crypto vulnerabilities in your inventory.
- Identify vulnerabilities with respect to quantum adversary.
- Protect your perimeter (i.e., vital communications between your organizations components that happen within the outside world) using agile approach and hybrid approach, that combines classical and post-quantum cryptography
- Start migrating your architecture to enable cryptographic agility
- Once cryptographic agility is built-in, switch to post-quantum cryptographic standards that are finalized by standardization bodies.
Do not hesitate to contact us at info@infosecglobal.com for more information on how your organization can migrate to NIST's new standards.
