On PQC Migration and Crypto-Agility

TL;DR

This paper surveys the challenges and solutions related to migrating IT systems to post-quantum cryptography, emphasizing the importance of crypto-agility and providing a community resource for tracking progress.

Contribution

It offers a comprehensive literature survey and a categorized snapshot of challenges and solutions, establishing a community project for ongoing updates in PQC migration and crypto-agility.

Findings

Identified key challenges in PQC migration

Categorized solutions across different areas

Proposed a community-driven tracking platform

Abstract

Besides the development of PQC algorithms, the actual migration of IT systems to such new schemes has to be considered, best by utilizing or establishing crypto-agility. Much work in this respect is currently conducted all over the world, making it hard to keep track of the many individual challenges and respective solutions that have been identified. In consequence, it is difficult to judge for both individual application scenarios and on a global scale, whether all (known) challenges have been addressed respectively or what their current state is. We provide a literature survey and a snapshot of the discovered challenges and solutions categorized in different areas. We use this as starting point for a community project to keep track of the ongoing efforts and the state of the art in this field. Thereby we offer a single entry-point into the subject reflecting the current state in a timely manner.