Most currently used cryptographic tools for protecting data are based on certain computational assumptions, which makes them vulnerable with respect to technological and algorithmic developments, such as quantum computing. One existing option to counter this potential threat is quantum key distribution, whose security is based on the laws of quantum physics. Quantum key distribution is secure against unforeseen technological developments. A second approach is post-quantum cryptography, which is a set of cryptographic primitives that are believed to be secure even against attacks with both classical and quantum computing technologies. From this perspective, this study reviews recent progress in the deployment of the quantum-secured infrastructure based on quantum key distribution, post-quantum cryptography, and their combinations. Various directions in the further development of the full-stack quantum-secured infrastructure are also indicated. Distributed applications, such as blockchains and distributed ledgers, are also discussed.
翻译:当前用于保护数据的大多数密码学工具均基于特定的计算假设,这使得它们面临技术和算法发展(如量子计算)带来的脆弱性。应对这一潜在威胁的现有选项之一是量子密钥分发,其安全性基于量子物理定律,能够抵御未预见的技术发展。第二种方法是后量子密码学,这是一组被认为即使在经典与量子计算技术攻击下依然安全的密码学原语。基于此视角,本研究综述了基于量子密钥分发、后量子密码学及其组合的量子安全基础设施部署的最新进展,并指出了全栈量子安全基础设施进一步发展的多个方向。此外,还讨论了分布式应用(如区块链和分布式账本)的相关议题。