3.6 PQC Migration

Steps for introducing quantum-safe cryptography.

What needs to be done:

• Identify all cryptographic systems
• Document RSA/ECC usage
• Assess data lifespan
• Risk categorization

Tools:

• Certificate scanner
• Code analysis
• Network audit

First implementations:

• Hybrid mode (classical + PQ)
• Non-critical systems first
• Performance tests
• Compatibility testing

Production transition:

• Prioritize high-risk systems
• Gradual migration
• Fallback strategies
• Employee training

During the transition period:

Encryption: X25519 + ML-KEM-768
Signature: ECDSA + ML-DSA-65

Advantage: Security even if one algorithm is broken.