Follow up position paper_on_post quantum cryptography
The impact of a potential large scale quantum computer on our current digital infrastructures has been discussed in ANSSI 2022’s position paper [1]. While the quantum threat did not undergo any game-changing advance since the publication of [1], post-quantum cryptography, PQC for short, is becoming more and more a reality. Indeed, the research and development efforts on the design and analysis of post-quantum algorithms has highly increased in the last few years, concerning both theoretical hardness and secure implementations perspectives. This is attested by the increasing number of collaborative projects and scientific publications on the subject in Europe and abroad. For instance, as recently published in a report [10, Page 23], the French government has announced investing 350M euros in research projects on quantum technologies in the past two years. This investment includes five post-quantum cryptography re-search projects (PQTLS, RESQUE, HYPERFORM, μPQRS, X7PQC). Furthermore, four schemes have gained the status of NIST first future PQC standards [2]: Crystals-Kyber [23], Crystals-Dilithium [14],Falcon [22] and SPHINCS+ [11]. The NIST campaign for post-quantum algorithms is still ongoing and other candidate algorithms will join the four future standards in the next years. In parallel, an increas-
ing standardization effort on hybrid post-quantum protocols is noticeable [24,25,13]. Several companies report having now experimented hybrid protocols for a large variety of hardware and software products.