Quantum computing is emerging as a significant threat to information protected by widely used cryptographic systems. Cryptographic methods, once deemed secure for decades, are now at risk of being compromised, posing a massive threat to the security of sensitive data and communications across enterprises worldwide. As a result, there is an urgent need to migrate to quantum-resistant cryptographic systems. This is no simple task. Migrating to a quantum-safe state is a complex process, and many organisations lack the in-house expertise to navigate this transition without guidance. In this paper, we present a comprehensive framework designed to assist enterprises with this migration. Our framework outlines essential steps involved in the cryptographic migration process, and leverages existing organisational inventories. The framework facilitates the efficient identification of cryptographic assets and can be integrated with other enterprise frameworks smoothly. To underscore its practicality and effectiveness, we have incorporated case studies that utilise graph-theoretic techniques to pinpoint and assess cryptographic dependencies. This is useful in prioritising crypto-systems for replacement.

翻译：量子计算正对广泛使用的密码系统所保护的信息构成重大威胁。曾被认为可安全使用数十年的密码方法如今面临被破解的风险，对全球企业敏感数据和通信的安全构成巨大威胁。因此，迫切需要迁移至抗量子密码系统。这并非易事。迁移至量子安全状态是一个复杂的过程，许多组织缺乏内部专业知识，无法在没有指导的情况下完成这一过渡。本文提出一个综合性框架，旨在协助企业进行此次迁移。该框架概述了密码迁移过程中的关键步骤，并利用现有组织清单。该框架有助于高效识别密码资产，并能与其他企业框架顺利集成。为突出其实用性和有效性，我们纳入了案例研究，采用图论技术来识别和评估密码依赖关系。这对于确定密码系统替换优先级具有实用价值。