This survey is on forward-looking, emerging security concerns in post-quantum era, i.e., the implementation attacks for 2022 winners of NIST post-quantum cryptography (PQC) competition and thus the visions, insights, and discussions can be used as a step forward towards scrutinizing the new standards for applications ranging from Metaverse, Web 3.0 to deeply-embedded systems. The rapid advances in quantum computing have brought immense opportunities for scientific discovery and technological progress; however, it poses a major risk to today's security since advanced quantum computers are believed to break all traditional public-key cryptographic algorithms. This has led to active research on PQC algorithms that are believed to be secure against classical and powerful quantum computers. However, algorithmic security is unfortunately insufficient, and many cryptographic algorithms are vulnerable to side-channel attacks (SCA), where an attacker passively or actively gets side-channel data to compromise the security properties that are assumed to be safe theoretically. In this survey, we explore such imminent threats and their countermeasures with respect to PQC. We provide the respective, latest advancements in PQC research, as well as assessments and providing visions on the different types of SCAs.
翻译:本综述聚焦后量子时代的前沿新兴安全问题,即针对美国国家标准与技术研究院(NIST)后量子密码(PQC)竞赛2022年获胜算法的实现攻击。相关见解与讨论可作为审视从元宇宙、Web 3.0到深度嵌入式系统等应用新标准的基石。量子计算的飞速发展为科学发现和技术进步带来巨大机遇,但通过先进量子计算机可破解所有传统公钥密码算法,对当代安全构成重大威胁。这推动了被认为能抵御经典及强大量子计算机攻击的PQC算法的积极研究。然而,算法安全性并不充分,众多密码算法易受侧信道攻击(SCA),攻击者可通过被动或主动方式获取侧信道数据,破坏理论上安全的属性。本综述探讨了PQC面临的此类紧迫威胁及其对策,提供了PQC研究的最新进展,并对不同类别SCA进行了评估与前瞻分析。