NSA Post Quantum Cryptography update

Caute_cautim — Sun, 21 Apr 2024 05:39:15 GMT

Hi All

The National Security Agency Post-Quantum Cryptography guidance has been updated to allow ML-DSA (aka CRYSTALS-Dilithium, aka FIPS-PUB 204) for firmware and software signing. This is significant as it means we now have an alternative to XMSS/LMS based code signing. (XMSS/LMS are Quantum-safe but have implementation challenges using Hardware Security Modules (HSMs) to store the state for the signature algorithms.)

Short version: expect to see lots of hardware and software switching to ML-DSA in the next year.

New version of the CNSA 2.0 FAQ .. note the URL is unchanged, but the FAQ document it links is now updated to Apr 2024

https://media.defense.gov/2022/Sep/07/2003071836/-1/-1/0/CSI_CNSA_2.0_FAQ_.PDF

Regards

Caute_Cautim

Re: NSA Post Quantum Cryptography update

Kyaw_Myo_Oo — Sun, 21 Apr 2024 07:54:43 GMT

Thanks for sharing, looks interesting @Caute_cautim.

topic NSA Post Quantum Cryptography update in Industry News

NSA Post Quantum Cryptography update

Re: NSA Post Quantum Cryptography update