Post-Quantum Cryptography (PQC) for Identity Management

Abstract

The impending arrival of viable quantum computing is a major worry to modern-day identity management systems that mainly depend on classical public-key cryptography techniques such as RSA and elliptic curve. Such systems are the basis of secure infrastructure in digital identities such as authentication, digital signature and trust models based on certificates. These cryptographic primitives can be broken using quantum algorithms like Shor and Grover, compromising the privacy of credentials and sessions stored and authenticated on digital ecosystems. The paper provides the necessity of the transition of identity management systems to post-quantum cryptographic (PQC) algorithms that will be resistant to quantum attacks. It gives a general overview of quantum-exposed identity protocols, as well as a look at the up-and-coming PQC algorithms under development, with a special call to digital signature algorithms capable of identity provision, authentication, and credential lifecycle management. Moreover, the paper isolates the problems of integration which include key size overhead, legacy system compatibility and performance trade-offs and suggests integration to take place through the use of hybrid and decentralized framework to allow a secure migration. This study will form part of a strategic plan to a post-quantum identity infrastructure, with the long term reliability, validity, and withstanding of quantum-era vulnerabilities.