{"id":3067,"date":"2024-11-21T07:23:30","date_gmt":"2024-11-21T07:23:30","guid":{"rendered":"https:\/\/certera.com\/blog\/?p=3067"},"modified":"2024-11-21T07:23:31","modified_gmt":"2024-11-21T07:23:31","slug":"nist-advances-14-algorithms-to-round-2-of-the-pqc-standardization-process","status":"publish","type":"post","link":"https:\/\/certera.com\/blog\/nist-advances-14-algorithms-to-round-2-of-the-pqc-standardization-process\/","title":{"rendered":"NIST Advances 14 Algorithms to Round 2 of the Post-Quantum Cryptography Standardization Process"},"content":{"rendered":"\n

NIST<\/a> has made its most recent major step in securing digital communication from the new threats of quantum computing.<\/p>\n\n\n\n

It wrapped up the promotion of 14 cryptographic algorithms to the second round of its additional post-quantum digital signing competition.<\/p>\n\n\n\n

This is the agency\u2019s additional step towards the persistent effort to create secure cryptographic standards in the face of the fast advancement of quantum computing technology <\/a>capable of violating public key cryptographic communication.<\/p>\n\n\n\n

The Need for Diversity in Digital Signatures<\/h2>\n\n\n\n

In July 2022, NIST published its first lot of quantum-resistant algorithms for standardization<\/a>. This comprised encryption techniques and digital signatures.<\/p>\n\n\n\n

While this step had marked significant progress, NIST still felt that the digital signature schemes lacked diversity, and they needed more variety in their alternatives, particularly those concerning lattice-based approaches, due to some potential vulnerabilities.<\/p>\n\n\n\n

Also Read:<\/strong> NIST Releases Its Initial Set of Finalized Post-Quantum Encryption Standards<\/a><\/p>\n\n\n\n

In September 2022, NIST called for new proposals on digital signatures; 40 timely submissions were made before the June 2023 cut-off date. After careful review, NIST narrowed the pool to 14 candidates for Round 2.<\/p>\n\n\n\n

The Selected 14 Algorithms<\/h2>\n\n\n\n

NIST called for submissions of this auxiliary project at the end of 2023, and researchers around the globe responded with 40 proposals.<\/p>\n\n\n\n

Hence, the diversity of cryptographic techniques was wide. Of them, 14 algorithms were selected through strict review to advance into the second round.<\/p>\n\n\n\n

<\/a>Code-Based Approaches<\/h3>\n\n\n\n
    \n
  1. CROSS<\/li>\n\n\n\n
  2. LESS<\/li>\n<\/ol>\n\n\n\n

    <\/a>Lattice-Based Approach<\/h3>\n\n\n\n
      \n
    1. HAWK<\/li>\n<\/ol>\n\n\n\n

      <\/a>Multivariate-Based Approaches<\/h3>\n\n\n\n
        \n
      1. MAYO<\/li>\n\n\n\n
      2. QR-UOV<\/li>\n\n\n\n
      3. SNOVA<\/li>\n\n\n\n
      4. UOV<\/li>\n<\/ol>\n\n\n\n

        <\/a>MPC-in-the-Head-Based Approaches<\/h3>\n\n\n\n
          \n
        1. Mirath (merger of MIRA\/MiRitH)<\/li>\n\n\n\n
        2. MQOM<\/li>\n\n\n\n
        3. PERK<\/li>\n\n\n\n
        4. RYDE<\/li>\n\n\n\n
        5. SDitH<\/li>\n<\/ol>\n\n\n\n

          <\/a>Isogeny-Based Approach<\/h3>\n\n\n\n
            \n
          1. SQIsign<\/li>\n<\/ol>\n\n\n\n

            <\/a>Symmetric-Based Approach<\/h3>\n\n\n\n
              \n
            1. FAEST<\/li>\n<\/ol>\n\n\n\n

              The Evaluation Process<\/h2>\n\n\n\n

              The evaluation stage, expected to take 12-18 months, allows submission teams to hone their proposals to more fine grain. By January 17, 2025, teams may submit revised specifications and implementations.<\/p>\n\n\n\n

              Expert Insights on Quantum Preparedness<\/h2>\n\n\n\n

              Experts warn that the day of quantum computing may arrive sooner than expected and thus requires preparation now. Traditional encryptions will soon be broken and force businesses to embrace crypto-agility<\/a>–the ability to act fast on new cryptographic standards.<\/p>\n\n\n\n

              <\/a>Issues in Migration<\/h3>\n\n\n\n

              Colin Soutar, a Deloitte MD, further puts it that some uncertainty in the timeline of when it will happen complicates the effort to focus on what should migrate. Still, organizations must start preparing today to mitigate long-term risks of quantum threats.<\/p>\n\n\n\n

              <\/a>Strategic Urgency<\/h3>\n\n\n\n

              Kevin Bocek, Chief Innovation Officer, Venafi, closed out the conversation by saying there is a critical need for secure machine identities – the backbone of enterprise security – to gain visibility into cryptographic assets and embrace hybrid solutions connecting traditional with quantum-resistant techniques.<\/p>\n\n\n\n

              Future Steps and Industry Implications<\/h2>\n\n\n\n

              Thus, NIST\u2019s actions in this critical stage toward mitigating the threat of quantum Proposals developed for the second round will be published when the 6th PQC Standardization Conference is held by the agency in September 2025.<\/p>\n\n\n\n

              Organizations are urged to:<\/strong><\/p>\n\n\n\n