As the quantum computing era approaches, securing classical cryptographic protocols becomes imperative. Public key cryptography is widely used for signature and key exchange but it is the type of cryptography more threatened by quantum computing. Its application typically requires support via a public-key certificate, which is a signed data structure and must therefore face twice the quantum challenge: for the certified keys and for the signature itself. We present the latest developments in selecting robust Post-Quantum algorithms and investigate their applicability in the Public Key Infrastructure context. Our contribution entails defining requirements for a secure transition to a quantum-resistant Public Key Infrastructure, with a focus on adaptations for the X.509 certificate format. Additionally, we explore transitioning Certificate Revocation List and Online Certificate Status Protocol to support quantum-resistant algorithms. Through comparative analysis, we elucidate the complex transition to a quantum-resistant PKI.

翻译：随着量子计算时代的临近，保护经典密码协议变得至关重要。公钥密码学广泛应用于签名和密钥交换，但这类密码学正面临量子计算的严重威胁。其应用通常需要通过公钥证书提供支持，而公钥证书作为签名数据结构，需应对双重量子挑战：既针对被认证的密钥，也针对签名本身。本文介绍了选择强健后量子算法的最新进展，并探讨其在公钥基础设施环境中的适用性。我们的贡献包括定义向量子安全公钥基础设施安全过渡的要求，重点关注X.509证书格式的适配方案。此外，我们探索了如何改造证书吊销列表和在线证书状态协议以支持量子安全算法。通过对比分析，我们阐明了向量子安全公钥基础设施过渡的复杂性。