Salta il testo dell’articolo
Maya wants a list she can defend . The company has asked which systems still depend on public - key methods that a large quantum computer could break , and she has one afternoon to begin . On the desk are three finished NIST standards , published on 13 August 2024 : FIPS 203 , FIPS 204 , and FIPS 205 . She does not need another essay about physics . She needs names a supplier will recognize . FIPS 203 specifies ML - KEM , a key - encapsulation mechanism . Under certain conditions , two parties can use it to establish a shared secret over a public channel . That secret can then be used with symmetric algorithms to protect the traffic . For Maya the document answers one question : how do two sides agree on a key . FIPS 204 specifies ML - DSA . It can generate and verify digital signatures . A signature can help a recipient detect an unauthorized change and authenticate who claims to have signed . That job is not key agreement . A service may need one role , or both , and mixing the names would make the inventory false . FIPS 205 specifies SLH - DSA , a stateless hash - based signature . Like ML - DSA , it serves the signature role , while ML - KEM serves key establishment . NIST offers SLH - DSA as a backup signature , built on different mathematics , in case ML - DSA is later found weak . Maya notes the difference and does not treat the two signature standards as the same product . NIST's migration guidance says organizations need to identify where vulnerable algorithms are used and plan updates to products , services , and protocols . She takes that as the first hour of work , not as an order to touch every system before supper . A memo that only says " replace it all " gives nobody a place to start . So she does not open a change ticket . She makes a table : each service , its owner , the data it must protect , and whether it needs key establishment , a digital signature , or both . The standards do not fill the rows . They give the columns names a supplier can answer . When the first call comes , she can ask one question and understand the reply . The sheet is still mostly blank when she stops . A migration is many small decisions , and a precise inventory is what puts those decisions in an order .
Continua a leggere con le traduzioni Crea un account gratuito: 7 giorni di Pro, poi 20 traduzioni di parole al giorno oppure un piano a pagamento.
