- 期刊
金融業後量子密碼（PQC）遷移指引
Post-Quantum Cryptography (PQC) Migration Guide for Financial Institutions
摘要
量子電腦的發展已是科技界的熱門話題，它的出現顛覆了我們對電腦的想像，量子運算也有望解決我們地球面臨的一些挑戰，包括環境、農業、健康、能源、氣候、材料科學等領域。對於其中一些問題，隨著系統的成長，傳統運算越來越受到挑戰，量子系統將會有超過現今最強大超級計算機的能力，例如現今電腦安全系統中，必定會運用到的加密與電子簽章技術，早在1994年時，Peter Shor發現了一種可用於整數分解的量子演算法，其執行速度會以指數方式快過已知最好的傳統演算法，能夠破解作為現今電子商務安全性基礎的眾多公開金鑰密碼編譯系統，包括RSA和橢圓曲線密碼（Elliptic Curve Cryptography），有朝一日量子電腦成功製造出來後，攻擊者將能夠破解當今世界上使用的主要公鑰密碼系統，所以我們需要提前準備避免對現今密碼學的破壞性影響。而為了應對量子破密的潛在威脅，美國NIST在2024年8月13日公布了歷經8年選出的後量子密碼學（PQC）標準，其中3個新的聯邦資訊處理標準（FIPS），分別是FIPS 203、FIPS 204與FIPS 205，第4個PQC標準將於2024年底推出。因此評估採用後量子密碼（PQC）來確保數據的安全性，及後量子密碼的遷移計畫已是刻不容緩的工作。
並列摘要
The development of quantum computers has become a hot topic in the technology world. The emergence of quantum computers has subverted our imagination of computers. Quantum computing is also expected to solve some of the challenges facing our planet, including the environment, agriculture, health, energy, climate, and materials science. For some of these problems, with the growth of the system, traditional computing is increasingly challenged. Quantum systems will have capabilities beyond today's most powerful supercomputers. For example, in today's computer security systems, encryption and digital signature technologies must be used. As early as 1994, Peter Shor discovered a quantum algorithm that can be used for integer decomposition. Its execution speed will be exponentially faster than the best known traditional algorithms, and it can crack many public key cryptography systems that are the basis of today's e-commerce security, including RSA and Elliptic Curve Cryptography. Once a quantum computer is successfully manufactured, attackers will be able to crack the main public key cryptography systems used in the world today. Therefore, we need to prepare in advance to avoid the destructive impact on current cryptography. In order to deal with the potential threat of quantum cracking, the US NIST announced the Post-Quantum Cryptography (PQC) standard selected after 8 years on August 13, 2024, including 3 new Federal Information Processing Standards (FIPS), which are FIPS 203, FIPS 204 and FIPS 205 respectively. The 4th PQC standard will be launched at the end of 2024. Therefore, evaluating the adoption of Post-Quantum Cryptography (PQC) to ensure data security, and the migration plan of Post-Quantum Cryptography is an urgent task.