====== 3.3 NIST PQC standardi ====== Službeni američki standardi za kvantno sigurnu kriptografiju. ===== Pozadina ===== NIST((National Institute of Standards and Technology: https://www.nist.gov/)) je nakon 8 godina istraživanja u kolovozu 2024. objavio prva tri Post-Quantum standarda((NIST Post-Quantum Cryptography Project: https://csrc.nist.gov/Projects/post-quantum-cryptography)). ===== Tri standarda ===== ==== FIPS 203 - ML-KEM ==== **Module-Lattice-Based Key-Encapsulation Mechanism**((NIST FIPS 203: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf)) * Za: Enkripciju / razmjenu ključeva * Temelji se na: CRYSTALS-Kyber((CRYSTALS-Kyber specifikacija: https://pq-crystals.org/kyber/)) * Korištenje: TLS((Transport Layer Security)), VPN, sigurna komunikacija ==== FIPS 204 - ML-DSA ==== **Module-Lattice-Based Digital Signature Algorithm**((NIST FIPS 204: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf)) * Za: Digitalne potpise * Temelji se na: CRYSTALS-Dilithium((CRYSTALS-Dilithium specifikacija: https://pq-crystals.org/dilithium/)) * Korištenje: Certifikati, potpisivanje softvera ==== FIPS 205 - SLH-DSA ==== **Stateless Hash-Based Digital Signature Algorithm**((NIST FIPS 205: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.205.pdf)) * Za: Digitalne potpise (rezerva) * Temelji se na: SPHINCS+((SPHINCS+ specifikacija: https://sphincs.org/)) * Korištenje: Ako ML-DSA pokaže slabosti ===== Preporuka ===== NIST preporučuje hitno uvođenje ovih standarda. Mogu se i trebaju implementirati sada. ===== Izvori ===== * [[https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards|NIST priopćenje (13. kolovoza 2024)]] * [[https://csrc.nist.gov/Projects/post-quantum-cryptography|NIST PQC Project Homepage]] * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf|FIPS 203 (ML-KEM) puni tekst]] * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf|FIPS 204 (ML-DSA) puni tekst]] * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.205.pdf|FIPS 205 (SLH-DSA) puni tekst]]