Quantum-Safe Cryptography Readiness in Enterprise Networks: Challenges and Roadmap

Paper ID: EIJTEM_2023_10_4_177-181

Author's Name: Hans Eriksson

Volume: 10

Issue: 4

Year: 2023

Page No: 177-181

Abstract:

The advancement of quantum computing poses a long-term threat to widely deployed public-key cryptographic algorithms such as RSA and ECC, making enterprise readiness for post-quantum cryptography (PQC) an emerging priority. This paper investigates the preparedness of enterprise networks for the transition to quantum-resistant algorithms. We survey 130 CISOs across finance, healthcare, and manufacturing sectors to assess current awareness and readiness levels. Only 11% of organizations have initiated transition planning, and most lack crypto-inventory tools to assess exposure. We evaluate NIST Round 3 PQC candidates—Kyber, Dilithium, and SPHINCS+—in terms of performance and integration complexity. Test deployments are conducted for TLS 1.3 using Open Quantum Safe libraries on Apache and NGINX servers, revealing an average increase of 20–35% in handshake times and key sizes up to 4KB. We propose a phased roadmap for PQC adoption: (1) asset discovery and inventory, (2) cryptographic agility via abstraction layers, (3) hybrid key exchange deployments, and (4) full migration post-NIST standardization. Legacy PKI systems, IoT endpoints, and VPN infrastructure are identified as the most vulnerable to disruption. Organizational barriers include lack of skilled personnel and concerns over interoperability. Our findings underscore the need for crypto-agility and standardization support to ensure a smooth migration. The paper concludes with strategic recommendations for enterprise CISOs planning for quantum-resilient security architectures.

Keywords: Quantum-Safe, Cryptography, Enterprise Networks.

References:

1. Chen, L., Jordan, S., Liu, Y. K., Moody, D., Peralta, R., Perlner, R., & Smith-Tone, D. (2016). Report on Post-Quantum Cryptography (NIST IR 8105). National Institute of Standards and Technology.
2. Bernstein, D. J., & Lange, T. (2017). Post-quantum cryptography. Nature, 549(7671), 188–194.
3. Hülsing, A., Rijneveld, J., Schwabe, P., & Weber, T. (2019). SPHINCS+: Submission to the NIST Post-Quantum Project. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2019(2), 1–24.
4. IBM Security. (2022). The Quantum Decade: Building a Safe and Secure Future. https://www.ibm.com/security
5. ENISA. (2021). Post-Quantum Cryptography: Current State and Quantum Readiness. https://www.enisa.europa.eu
6. Open Quantum Safe Project. (2023). liboqs Library and Tools. https://openquantumsafe.org
7. Microsoft. (2023). Quantum-Safe Protocols and Hybrid Key Exchanges. https://learn.microsoft.com
8. Srikanth Bellamkonda. “Cloud Security Challenges: An In-Depth Examination of Risks and Mitigation Strategies”. International Journal of Intelligent Systems and Applications in Engineering, vol. 10, no. 3, Sept. 2022, pp. 477 -, https://ijisae.org/index.php/IJISAE/article/view/7023.
9. Mozilla. (2023). TLS 1.3 and Post-Quantum Handshakes. https://wiki.mozilla.org/Security/TLS
10. Google. (2022). Hybrid PQC Deployments in Chrome and Cloudflare. https://security.googleblog.com
11. Arndt, R., & Langenberg, H. (2022). Readiness for post-quantum cryptography in enterprise infrastructure. Journal of Cybersecurity, 8(1), taac001.
12. PCI Security Standards Council. (2022). Cryptographic Key Management Requirements. https://www.pcisecuritystandards.org
13. Cloud Security Alliance. (2023). Quantum-Safe Security Framework for Cloud Providers. https://cloudsecurityalliance.org
14. BoringSSL Project. (2023). Integration with liboqs for PQC. https://boringssl.googlesource.com
15. NIST. (2023). Post-Quantum Cryptography Standardization Project. https://csrc.nist.gov/Projects/post-quantum-cryptography
16. CIS. (2022). Controls for Cryptographic Inventory and Key Management. https://www.cisecurity.org

View PDF