Systematisation of Knowledge on Post-Quantum Cryptography Integration in Software Development
Original title: SoK: Post-Quantum Cryptography (PQC) Integration in Software Development: Approaches, Gaps, and Future Directions
The paper identifies gaps in coordination and evaluation evidence for PQC integration across the software development lifecycle.
This paper presents a Systematisation of Knowledge on post-quantum cryptography integration in software development. It synthesises existing approaches across implementation, migration, and developer education. Analysis against NIST PQC standards shows disconnected support across the software development lifecycle, with limited evidence of operational readiness.
- Existing work establishes technical and organisational foundations for PQC.
- Evaluation evidence is concentrated in controlled or early-stage settings.
- Research directions focus on lifecycle-oriented approaches connecting technical, developer, and organisational requirements.
- Organizations
- NIST
From the original article
1 min read at arxiv.orgStandardised post-quantum cryptography (PQC) is critical for protecting software systems against future quantum threats, but standardised algorithms alone do not provide a pathway for their secure integration into software. This paper presents a Systematisation of Knowledge (SoK) of PQC integration in software development, synthesising existing approaches across implementation, migration, and developer education.
By Shakya R. D. N. · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.