Transitioning to Post Quantum Cryptography based solutions requires preparedness, risk assessment and financial and operational investment. Towards this, discovery and inventory of Cryptographic Artefacts is the critical first step, that will enable the transition. •
i.
Transitioning to Post Quantum Cryptography based solutions requires preparedness, risk assessment and financial and operational investment Towards this, discovery and inventory of Cryptographic Artefacts is the critical first step, that will enable the transition. •
i. Identify and catalogue all cryptographic artefacts (algorithms, keys, certificates, protocols, libraries, hardware modules, cloud services) across internal and external facing applications, products and infrastructure. ii. The tool should perform a comprehensive quantum risk assessment and identify systems prone to potential quantum attacks, and highlight risks to sensitive data. iii. Classify all the artefacts by type, lifetime and business criticality. Apply structured frameworks such as Mosca’s algorithm (compare data lifetime plus migration time against expected arrival of cryptographic relevant quantum computer) to detect and categorize risks. iv. Recommend suitable alternatives (PQC/ Hybrid algorithms) for applications based on risk profile, latency, cost, etc. •