The emergence of Cryptographically Relevant Quantum Computers (CRQCs) threatens traditional cryptographic systems, necessitating a transition to Post-Quantum Cryptography (PQC). OpenSSL 3.0 introduced Providers, enabling modular cryptographic integration. This work presents the concept of a shallow Provider, facilitating integration of external implementations, to achieve a higher degree of cryptographic agility. aurora, which we introduce as an instance of the shallow Provider methodology, integrates standardized PQC algorithms in TLS 1.3 for both key establishment and authentication, to support the PQC transition. It enhances cryptographic agility by allowing OpenSSL to dynamically adapt to evolving PQC standards and the rapidly evolving ecosystem of PQC implementations.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Integrating PQC in OpenSSL via Shallow Providers for Cryptographic Agility

  • Akif Mehmood,
  • Nicola Tuveri

摘要

The emergence of Cryptographically Relevant Quantum Computers (CRQCs) threatens traditional cryptographic systems, necessitating a transition to Post-Quantum Cryptography (PQC). OpenSSL 3.0 introduced Providers, enabling modular cryptographic integration. This work presents the concept of a shallow Provider, facilitating integration of external implementations, to achieve a higher degree of cryptographic agility. aurora, which we introduce as an instance of the shallow Provider methodology, integrates standardized PQC algorithms in TLS 1.3 for both key establishment and authentication, to support the PQC transition. It enhances cryptographic agility by allowing OpenSSL to dynamically adapt to evolving PQC standards and the rapidly evolving ecosystem of PQC implementations.