Trust is the core building block of secure systems, and it is enforced through methods to ensure that a specific system is properly configured and works as expected. In this context, a Root of Trust (RoT) establishes a trusted environment, where both data and code are authenticated via a digital signature based on asymmetric cryptography, which is vulnerable to the threat posed by Quantum Computers (QCs). Firmware, being the first layer of trusted software, faces unique risks due to its longevity and difficult update. The transition of firmware protection to Post-Quantum Cryptography (PQC) is urgent, since it reduces the risk derived from exposing all computing and network devices to quantum-based attacks. This paper offers an analysis of the most common trust techniques and their roadmap towards a Post-Quantum (PQ) world, by investigating the current status of PQC and the challenges posed by such algorithms in existing Trusted Computing (TC) solutions from an integration perspective. Furthermore, this paper proposes an architecture for TC techniques enhanced with PEC, addressing the imperative for immediate adoption of quantum-resistant algorithms.
翻译:信任是安全系统的核心构建模块,它通过确保特定系统正确配置并按预期运行的方法得以实施。在此背景下,信任根(RoT)建立了一个可信环境,其中数据和代码均通过基于非对称密码学的数字签名进行认证,而该密码学易受量子计算机(QCs)带来的威胁。固件作为可信软件的第一层,由于其长寿命和更新困难的特点,面临独特的风险。将固件保护过渡到后量子密码学(PQC)迫在眉睫,因为这能降低所有计算和网络设备暴露于量子攻击的风险。本文通过从集成角度研究PQC的现状以及此类算法在现有可信计算(TC)解决方案中带来的挑战,分析了最常见的信任技术及其向后量子(PQ)世界演进的路线图。此外,本文提出了一种采用PEC增强的TC技术架构,以应对立即采用抗量子算法的迫切需求。