====== 3.3 NIST PQC standardi ====== Uradni ameriški standardi za kvantno varno kriptografijo. ===== Ozadje ===== NIST((National Institute of Standards and Technology: https://www.nist.gov/)) je po 8 letih raziskav avgusta 2024 objavil prve tri post-kvantne standarde((NIST Post-Quantum Cryptography Project: https://csrc.nist.gov/Projects/post-quantum-cryptography)). ===== Trije standardi ===== ==== FIPS 203 - ML-KEM ==== **Module-Lattice-Based Key-Encapsulation Mechanism**((NIST FIPS 203: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf)) * Za: Šifriranje / izmenjavo ključev * Temelji na: CRYSTALS-Kyber((CRYSTALS-Kyber specifikacija: https://pq-crystals.org/kyber/)) * Uporaba: TLS((Transport Layer Security)), VPN, varna komunikacija ==== FIPS 204 - ML-DSA ==== **Module-Lattice-Based Digital Signature Algorithm**((NIST FIPS 204: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf)) * Za: Digitalne podpise * Temelji na: CRYSTALS-Dilithium((CRYSTALS-Dilithium specifikacija: https://pq-crystals.org/dilithium/)) * Uporaba: Certifikati, podpisovanje programske opreme ==== FIPS 205 - SLH-DSA ==== **Stateless Hash-Based Digital Signature Algorithm**((NIST FIPS 205: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.205.pdf)) * Za: Digitalne podpise (rezerva) * Temelji na: SPHINCS+((SPHINCS+ specifikacija: https://sphincs.org/)) * Uporaba: Če ML-DSA pokaže slabosti ===== Priporočilo ===== NIST priporoča takojšnjo uvedbo teh standardov. Lahko in bi jih morali implementirati zdaj. ===== Viri ===== * [[https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards|NIST sporočilo za javnost (13. avgust 2024)]] * [[https://csrc.nist.gov/Projects/post-quantum-cryptography|NIST PQC Project Homepage]] * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf|FIPS 203 (ML-KEM) polno besedilo]] * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf|FIPS 204 (ML-DSA) polno besedilo]] * [[https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.205.pdf|FIPS 205 (SLH-DSA) polno besedilo]]