SOSS Community Day Japan 2024

In the area of computer security, we are on the cusp of the post-quantum era: cryptanalytically-relevant quantum computers (CRQC) pose a threat to public-key algorithms used today in network protocols and data formats. To address this concern, NIST has standardized a set of quantum-resistant algorithms, while NSA has announced the guidance for migrating national security systems to quantum resistant algorithms targeting 2035. In the open source community, we at the Fedora project are exploring adoption of those algorithms to set the ground for protecting our current and future users. In this session, we will present our strategy and the status of the effort.

Topics to be covered:

1. Key exchange and digital signature: threat models and priorities
2. State of the art algorithms and cryptanalysis
3. Avoiding implementation divergences across the operating system: consolidating the implementation to liboqs, a project part of the Post-Quantum Cryptography Alliance
4. Safely integrating non-finalized algorithms in a backward compatible manner
5. Example integration in TLS, IPsec, and verifiable data storage