The quantum threat to cybersecurity has accelerated the standardization of Post-Quantum Cryptography (PQC). Migrating legacy software to these quantum-safe algorithms is not a simple library swap, but a new software engineering challenge: existing vulnerability detection, refactoring, and testing tools are not designed for PQC's probabilistic behavior, side-channel sensitivity, and complex performance trade-offs. To address these challenges, this paper outlines a vision for a new class of tools and introduces the Automated Quantum-safe Adaptation (AQuA) framework, with a three-pillar agenda for PQC-aware detection, semantic refactoring, and hybrid verification, thereby motivating Quantum-Safe Software Engineering (QSSE) as a distinct research direction.
翻译:量子计算对网络安全的威胁加速了后量子密码(PQC)的标准化进程。将遗留软件迁移至这些量子安全算法并非简单的库替换,而是一项新的软件工程挑战:现有的漏洞检测、重构与测试工具并非为PQC的概率性行为、侧信道敏感性及复杂的性能权衡而设计。为应对这些挑战,本文提出了新型工具体系的愿景,并介绍了自动化量子安全适配(AQuA)框架。该框架围绕三大支柱展开:PQC感知检测、语义重构与混合验证,从而推动量子安全软件工程(QSSE)成为一个独立的研究方向。