HTTPS a ɛyɛ den na ɛyɛ adwuma yiye a ɛyɛ quantum-safe

Dɔn no Rebɔ wɔ Ɛnnɛ Encryption — Na Nnwuma Dodow no ara nni Adwene Biara

Bere biara a adetɔfoɔ bi de sika bɛkɔ, de ne nsa bɛhyɛ dashboard mu, anaa ɔde nkra bi bɛfa wo platform so no, HTTPS de cryptographic algorithms a ɛkura mu mfeɛ du du pii di saa data no ho ban komm. Nanso nsakrae bi a ɛfa asasewosow ho rekɔ so. Quantum kɔmputa — mfiri a ɛde abɔde mu nneɛma ho nimdeɛ a ɛyɛ nwonwa a ɛfa superposition ne entanglement ho di dwuma — rebɛn tumi a ɛbɛma wɔabubu akontaabu fapem a ɛwɔ RSA, ECDSA, ne Diffie-Hellman key exchange no mu ntɛmntɛm. Ahunahuna no nyɛ nsusuwii hunu bio. Wɔ afe 2024 mu no, NIST wiee ne post-quantum cryptography (PQC) gyinapɛn abiɛsa a edi kan no. Google, Cloudflare, ne Apple afi ase de algorithms a ɛko tia quantum redi dwuma dedaw wɔ nneɛma a wɔyɛ mu. Wɔ adwuma biara a ɛde data a ɛho hia kɔ intanɛt so — a ɛyɛ adwuma biara yiye — quantum-safe HTTPS ntease nyɛ nea wobetumi apaw bio. Ɛyɛ adwumayɛ ho hia.

Nea enti a Mprempren HTTPS no Bɛbubu Wɔ Quantum Ntua Ase

Ɛnnɛ HTTPS de ne ho to TLS (Transport Layer Security) so, a ɛde asymmetric cryptography di dwuma wɔ nsaanodwuma fã no mu de si ahintasɛm a wɔkyɛ wɔ akraman ne somfo ntam. Nsa a wɔde bɔ yi mu ahobammɔ gyina akontaabu mu haw ahorow a tete kɔmputa ahorow ntumi nni ho dwuma yiye so: factoring large integers (RSA) anaasɛ computing discrete logarithms on elliptic curves (ECDH). Quantum kɔmputa a ahoɔden wom a ɛdɔɔso a ɛde Shor algorithm di dwuma no betumi adi abien no nyinaa ho dwuma wɔ polynomial bere mu, na ɛbɛtew nea ebegye mfe ɔpepem pii wɔ tete kɔmputa kɛse so ma ayɛ nnɔnhwerew anaa simma kakraa bi pɛ.

Ade a ɛyɛ hu sen biara ne "otwa mprempren, decrypt akyiri yi" nhyehyɛe a ɔman-man agoruyɛfo de redi dwuma dedaw. Atamfo rekyerɛw kar akwan a wɔabɔ no kokoam so nnɛ a wɔn adwene ne sɛ sɛ quantum kɔmputa ahorow no nyin pɛ a, wɔbɛkyerɛ mu. Sikasɛm ho kyerɛwtohɔ, akwahosan ho nsɛm, adwene mu agyapade, aban nkitahodi — biribiara a wɔkyere wɔ akwantu mu mprempren bɛyɛ nea ɛyɛ mmerɛw wɔ akyi. Ɔman Ahobammɔ Dwumadibea no abɔ kɔkɔ sɛ saa ahunahuna yi trɛw kɔ data biara a ɛsɛ sɛ ɛyɛ kokoam bɛboro mfe 10, a ɛka nsɛm dodow no ara a ɛho hia wɔ adwumayɛ ho.

Akontaabu gu ahorow wɔ bere a quantum kɔmputa a ɛfa cryptographically relevant quantum computer (CRQC) bɛba ho. IBM kwankyerɛ no de n’ani si 100,000+ qubits so wɔ afe 2033. Google daa quantum mfomsoɔ nteɛsoɔ nsɛntitiriw adi wɔ ne Willow chip no mu wɔ afe 2024 awieeɛ mu gye mfe du anaa nea ɛboro saa na wɔawie wɔ wiase nyinaa nnwuma nyinaa mu.

Gyinapɛn Foforo: ML-KEM, ML-DSA, ne SLH-DSA

Wɔ mfeɛ awotwe nhwehwɛmu nhyehyɛeɛ a ɛfa nsɛm a ɛfiri cryptographers a wɔwɔ wiase nyinaa hɔ akyi no, NIST tintim post-quantum cryptographic gyinapɛn mmiɛnsa wɔ Oforisuo 2024. Wɔayɛ saa algorithms yi sɛ ɛbɛko atia ntua a ɛfiri quantum ne classical kɔmputa nyinaa mu, ahwɛ sɛ ahobanbɔ bɛtena hɔ akyɛ ɛmfa ho sɛdeɛ quantum hardware kɔ anim ntɛmntɛm.

ML-KEM (Module-Lattice-Based Key Encapsulation Mechanism, kan no na wɔfrɛ no CRYSTALS-Kyber) di TLS nsa a wɔde di dwuma no fã a ɛsesa safoa no ho dwuma. Ɛde akontaabu mu denden a ɛwɔ structured lattice haw ahorow a ɛda so ara yɛ nea wontumi nni ho dwuma ma quantum kɔmputa mpo no so si ECDH ananmu. ML-KEM yɛ adwuma yie a ɛyɛ nwonwa — ne safoa akɛseɛ sõ sene ECDH (bɛyɛ baiti 1,568 ma ML-KEM-768 hyia baiti 32 ma X25519), nanso kɔmputa so ka sua, ɛtaa yɛ ntɛmntɛm sene atetesɛm elliptic curve dwumadie.

ML-DSA (Module-Lattice-Based Digital Signature Algorithm, kan no na wɔfrɛ no CRYSTALS-Dilithium) ne SLH-DSA (Stateless Hash-Based Digital Signature Algorithm, kan no na wɔfrɛ no SPHINCS+) address nokwaredi — a ɛkyerɛ sɛ server a wo ne no rebɔ no yɛ nea ɛkyerɛ sɛ ɔyɛ no ankasa be. ML-DSA de nsaano nkyerɛwee a ɛyɛ ketewa a ɛfata ma dwumadie dodoɔ no ara ma, berɛ a SLH-DSA de fallback a ɛyɛ konservatif a egyina hash dwumadie nko ara so ma, de defense-in-depth ma sɛ lattice-based assumptions yɛ mmerɛw da a.

Hybrid Mode: Ɔkwan a ɛyɛ adwuma a ɛkɔ Quantum Ahobammɔ

Ahobanbɔ mfiridwumayɛfoɔ biara nni hɔ a ɔwɔ asɛdeɛ a ɔrehyɛ nyansa sɛ wɔbɛsesa anadwo baako. Mmom, nnwuma no ahyiam wɔ hybrid kwan a ɛka classical algorithm ne post-quantum algorithm bom wɔ TLS nsa a wɔde bɔ biara mu. Sɛ ɛbɛda adi sɛ post-quantum algorithm no wɔ mmerɛwyɛ bi a wonhuu bi a, classical algorithm no da so ara bɔ nkitahodi no ho ban. Sɛ quantum kɔmputa bi bubu classical algorithm no a, post-quantum algorithm no kura line no. Sɛ wɔsɛe abien no nyinaa bere koro mu nkutoo a, wobɛhwere ahobammɔ — tebea a ɛnyɛ nea ɛda adi wɔ nsoromma mu hwɛ mu.

Chrome ne Firefox boa X25519Kyber768 hybrid key exchange no dedaw default so firi 2025 mfitiaseɛ, a ɛkyerɛ sɛ HTTPS nkitahodiɛ ɔpepem pii da biara da wɔ quantum-safe dedaw wɔ key exchange fã. Cloudflare bɔɔ amanneɛ sɛ bɛboro 35% wɔ ne TLS 1.3 akwantuo mu de post-quantum key agreement di dwuma. AWS, Microsoft Azure, ne Google Cloud nyinaa de quantum-safe TLS options aba ama wɔn dwumadie a wɔhwɛ so. Nsakrae no rekɔ so ntɛmntɛm sen sɛnea nnwuma dodow no ara hu.

Wɔsusu ɛka a wɔbɔ wɔ tu a wɔbɛtu akɔ quantum-safe HTTPS so wɔ mfiridwuma nnɔnhwereɛ ne sɔhwɛ kyinhyia mu. Wɔde ahintasɛm biara a w’adwuma no de akɔma pɛn no ho ka a wɔbɔ wɔ baabi foforo a worenkɔ no susuw ho. Hybrid deployment yi hia a ɛho hia sɛ wopaw ahobammɔ ne ahwɛyiye ntam no fi hɔ — wunya abien no nyinaa.

Adwumayɛ mu Nokwasɛm: Latency, Bandwidth, ne Handshake Overhead

Adeɛ baako a ɛdi kan a ɛhaw adwene wɔ post-quantum cryptography ho ne adwumayɛ a ɛkɔ fam. Safoa akɛse ne nsaano nkyerɛwee kyerɛ baiti pii wɔ waya no so ne nsa a ebetumi ayɛ brɛoo. Wiase ankasa mu deployments ada no adi sɛ saa dadwen yi yɛ nea wotumi di ho dwuma kɛse, nanso ɛnyɛ zero.

Sɛ wopɛ safoa nsakraeɛ a, ML-KEM-768 de bɛyɛ 1.1 KB ka TLS nsa a wɔde bɔ no ho sɛ wɔde toto X25519 nko ara ho a. Wɔ hybrid mode (X25519 + ML-KEM-768) mu no, sika a wɔde ka ho nyinaa bɛyɛ 1.2 KB. Wɔ nnɛyi ntwamutam so no, eyi kyerɛ ase sɛ latency nkɔanim a ɛnyɛ hwee — mpɛn pii no ennu milisekɔn 1 wɔ broadband nkitahodi so. Cloudflare’s production data ankyerɛ nkɛntɛnso biara a wobetumi asusuw wɔ krataafa load bere so ama wɔn a wɔde di dwuma no mu dodow no ara. Nanso, wɔ ntwamutam a wɔahyɛ no den (satellite links, IoT mfiri, mpɔtam a bandwidth sua) so no, overhead no betumi ayɛ kɛse, titiriw bere a adansedi nkɔnsɔnkɔnsɔn nso kura post-quantum signatures.

Authentication signatures de asɛnnennen kɛseɛ ba. ML-DSA-65 nsaano nkyerɛwee no bɛyɛ 3.3 KB sɛ wɔde toto baiti 64 ma ECDSA-P256 ho a. Sɛ adansedi krataa biara a ɛwɔ nkɔnsɔnkɔnsɔn mu no kura post-quantum nsaano nkyerɛwee a, nkɔnsɔnkɔnsɔn abiɛsa a wɔtaa de di dwuma no betumi de 10 KB anaa nea ɛboro saa aka nsa a wɔde bɔ no ho. Wei nti na nnwuma no rehwehwɛ akwan te sɛ adansedie krataa a wɔde mia, Merkle Dua Adansedie, ne TLS-level optimizations na ama nsa a wɔde bɔ no akɛseɛ akɔ so ayɛ adwuma. Ɛsɛ sɛ nnwuma a wɔde platform ahorow a wiase nyinaa dwumadiefoɔ di dwuma — titire wɔn a wɔsom mobile dwumadiefoɔ wɔ gua a ɛrenya nkɔsoɔ so — de ahwɛyie toto saa nsunsuansoɔ yi ho.

Nea Ɛsɛ sɛ Nnwumayɛbea Yɛ Mprempren: Tukɔ Ho Nhwehwɛmu Nhoma a Ɛyɛ Mfaso

Quantum-safe migration nyɛ adeyɛ baako na mmom ɛyɛ adeyɛ a ɛkɔ so nkakrankakra. Ahyehyɛde ahorow a wofi ase kyerɛw wɔn cryptographic dependencies nnɛ no benya gyinabea pa koraa asen wɔn a wɔtwɛn mmara kwan so ahyɛde ahorow no. Nhyehyɛe a mfaso wɔ so a wode befi nsakrae no ase ni:

1. Yɛ cryptographic inventory. Kyerɛ nhyehyɛe, protocol, ne nhomakorabea biara a ɛde RSA, ECDSA, ECDH, anaa Diffie-Hellman di dwuma. Eyi ka TLS nhyehyeɛ, API apon, VPNs, koodu nsaano nkyerɛwee, database encryption, ne nnipa foforɔ nkabom.
2. Fa data a ɛyɛ mmerɛw ne nkwa tenten di kan. Ɛsɛ sɛ nhyehyɛe ahorow a ɛhwɛ sikasɛm ho nsɛm, akwahosan ho kyerɛwtohɔ, mmara kwan so nkrataa, anaa ankorankoro nsɛm a ɛsɛ sɛ ɛyɛ kokoamsɛm mfe pii no di kan tu. "Harvest now, decrypt later" ma ahintasɛm a ɛtra hɔ kyɛ yɛ nea ɛho hia sen biara.
3. Ma hybrid post-quantum TLS nyɛ adwuma wɔ public-facing endpoints. Sɛ wo infrastructure no tu mmirika wɔ Cloudflare, AWS CloudFront, anaa CDNs a ɛte saa akyi a, ebia wowɔ kwan dedaw kɔ quantum-safe key exchange. Ma no nyɛ adwuma pefee na fa nnwinnade te sɛ Qualys SSL Labs anaa Open Quantum Safe adwuma no sɔhwɛ suite no di ho adanse.
4. Yɛ cryptographic nwomakorabea foforɔ. Hwɛ sɛ wo tech stack no de nwomakorabea a ɛboa ML-KEM ne ML-DSA — OpenSSL 3.5+, BoringSSL, liboqs, anaa AWS-LC bedi dwuma. Pin kɔ nkyerɛaseɛ a NIST-awieɛ dwumadie ka ho, ɛnyɛ nkyerɛaseɛ a wɔakyerɛw.
5. Sɔhwɛ sɛnea ɛne ne ho hyia ne adwumayɛ mu regressions. Nsa a wɔde bɔ kɛse betumi ne mfinimfini nnaka, ogya fasu, ne agyapade adesoa kari pɛ a ɛde kɛse anohyeto to TLS ClientHello nkrasɛm so no nni nkitaho yiye. Google hyiaa eyi wɔ Kyber rollouts mfiase na na ɛsɛ sɛ ɛde adwumayɛ ho nhyehyɛe di dwuma.
6. Fa crypto-agility nhyehyeɛ si hɔ. Yɛ nhyehyɛeɛ sɛdeɛ ɛbɛyɛ a wɔbɛtumi asesa cryptographic algorithms a wɔrensan nkyerɛw application code. Wei kyerɛ sɛ wobɛtwe crypto dwumadie a ɛwɔ interfaces a wɔtumi hyehyɛ akyi na woakwati hard-coded algorithm choices.

Wɔ platforms te sɛ Mewayz a ɛdi adwumayɛ ho nsɛm a ɛho hia ho dwuma wɔ module ahodoɔ 207 a wɔaka abom so — ɛfiri CRM kyerɛwtohɔ ne invoicing so kɔsi akatua, HR, ne analytics — cryptographic dependency no kɛseɛ. API frɛ biara a ɛda module ahorow ntam, wɛbhook biara a ɛkɔ nnwuma a ɛto so abiɛsa so, ɔdefo nhyiam biara a ɛde sikasɛm anaa adwumayɛfo data kɔ no gyina hɔ ma encryption surface a awiei koraa no ɛsɛ sɛ ɛdannan kɔ quantum-safe gyinapɛn ahorow so. Platforms a ɛwɔ centralized security architecture no wɔ mfasoɔ wɔ ha: core TLS layer ne shared cryptographic libraries a wobɛma ayɛ yie no bɛtumi cascade ahobanbɔ wɔ module nyinaa so bere koro mu, sene sɛ ɛbɛhia module-by-module remediation.

Mmarahyɛ Asase no Rekɔ so Ntɛmntɛm

Aban ahorow ntwɛn sɛ quantum kɔmputa bɛba ansa na wɔahyɛ sɛ wɔnyɛ ho biribi. United States Ɔman Ahobanbɔ Nkaeɛ NSM-10 (2022) kyerɛɛ aban nnwumakuo sɛ wɔnkyerɛw wɔn cryptographic nhyehyɛeɛ no na wɔnyɛ nhyehyɛeɛ a ɛfa atutena ho. Quantum Computing Cybersecurity Preparedness Act no hwehwɛ sɛ nnwumakuw de di kan wɔ quantum cryptography akyi a wobegye atom no ho. CISA quantum ahosiesie akwankyerɛ no kamfo kyerɛ pefee sɛ wɔmfa hybrid deployment fi ase ntɛm ara. Europa Aman Nkabom no kɔmputa so ahobammɔ adansedi nhyehyɛe no de quantum akyi ahwehwɛde ahorow rehyɛ mu, na sikasɛm ho mmarahyɛfo a Sikakorabea a Ɛhwɛ Amanaman Ntam Nsiesiei So ka ho no ahyɛ quantum asiane ho frankaa wɔ wɔn akwankyerɛ a wɔde hwɛ so no mu.

Wɔ nnwuma a wɔyɛ adwuma wɔ nnwuma a wɔahyɛ ho mmara mu — sikasɛm, akwahosan, aban apam, SaaS a ɛde data pii di dwuma — bere nhyehyɛe a wɔde di mmara so no reyɛ den. Nnwumakuw a wɔyɛ nnam gye HTTPS a ahobammɔ wom wɔ quantum mu no bɛkwati sɛ wɔbɛpere wɔn ho bere a ahyɛde ahorow no yɛ ahwehwɛ no. Nea ɛho hia kɛse no, wobetumi akyerɛ akyerɛ afɛfo ne wɔn ahokafo sɛ wɔn data ahobammɔ gyinabea no na ɛde ahunahuna a ɛreba no ba, ɛnyɛ mprempren de no nkutoo. Wɔ akansi gua ahorow a ahotoso yɛ nsonsonoe mu no, ahobammɔ gyinabea a ɛhwɛ daakye yi kura aguadi mu mfaso ankasa.

Dakye a Ɛbɛtumi Agyina Quantum-Resilient, Nsa Baako a Wɔbɛbɔ wɔ Bere Biara mu

Nsakraeɛ a ɛkɔ quantum-safe HTTPS so no yɛ cryptographic migration kɛseɛ wɔ intanɛt abakɔsɛm mu. Ɛka server biara, browser biara, mobile app biara, API biara, ne IoT mfiri biara a ɛnam TLS so di nkitaho. Asɛmpa no ne sɛ wɔawie gyinapɛn ahorow no, nneɛma a wɔde bedi dwuma no renyin, na adwumayɛ ho ka a wɔbɔ no reda adi sɛ wotumi di ho dwuma. Hybrid deployment model no kyerɛ sɛ nnwuma betumi agye quantum resistance atom nkakrankakra, a wɔmfa compatibility mmɔ afɔre anaasɛ wɔmfa asiane a ɛnsɛ nkɔ.

Nea ɛtetew ahyehyɛde ahorow a wɔbɛfa saa nsakrae yi so yiye afi wɔn a wɔbɛpere wɔn ho no mu ne bere a wɔafi ase ara kwa. Cryptographic agility — tumi a wode dannan wo ahobammɔ gyinabea bere a ahunahuna ne gyinapɛn ahorow sesa — ɛsɛ sɛ ɛyɛ nhyehyɛe nnyinasosɛm, ɛnyɛ akyi adwene. Wɔ adwumayɛ nhyehyɛe ahorow a ɛhwɛ adwumayɛ ho nsɛm nyinaa so, efi adetɔfo nkitahodi ne sikasɛm mu nkitahodi so kosi adwumayɛfo kyerɛwtohɔ ne nhwehwɛmu nsu afiri so no, mfaso a ɛwɔ hokwan yi a wobenya mu no rentumi nyɛ kɛse nsen saa. Quantum daakye nyɛ ade a ɛwɔ akyirikyiri a wontumi nsusuw ho. Ɛyɛ tu a ɛfiri aseɛ wɔ wo deployment a ɛdi hɔ no so.

Nsɛmmisa a Wɔtaa Bisa

Dɛn ne quantum-safe cryptography?

Quantum-safe cryptography (a wɔsan frɛ no post-quantum cryptography anaa PQC) kyerɛ cryptographic algorithms foforɔ a wɔayɛ sɛ ɛbɛbɔ ho ban afiri ntua a ɛfiri tete ne quantum kɔmputa nyinaa mu. Nea ɛnte sɛ mprempren gyinapɛn ahorow te sɛ RSA a ɛde ne ho to akontaabu mu haw ahorow a quantum kɔmputa betumi adi ho dwuma ntɛm so no, PQC gyina akontaabu mu nsɛnnennen a emu yɛ den a wogye di sɛ ɛyɛ den ma kɔmputa biara sɛ ebebubu so. Sɛ wogye saa algorithms yi tom a, ɛhwɛ sɛ wo HTTPS nkitahodi ahorow no bɛkɔ so ayɛ ahobammɔ bere tenten akosi daakye.

Bere bɛn na ɛsɛ sɛ mehaw me ho wɔ me mprempren HTTPS encryption no ho?

Asiane a ɛwɔ hɔ ntɛm ara ne "twa mprempren, decrypt akyiri yi" ntua, baabi a atamfo wia data a wɔabɔ no kokoam nnɛ de bubu no akyiri yi bere a quantum kɔmputa a ahoɔden wom wɔ hɔ no. Bere a quantum kɔmputa akɛse nnya mmaa ha no, tu a wotu kɔ quantum-afe gyinapɛn ahorow so no gye bere. Nsakrae no a wubefi ase mprempren no ho hia kɛse na ama wɔabɔ data kokoamsɛm a ɛtra hɔ kyɛ ho ban. Wɔ nnwuma a wɔreyɛ nhyehyɛe foforo no, Mewayz de ntetee module bɛboro 207 ma wɔ daakye-adanse ahobammɔ ho de gye $19/ɔsram pɛ.

Dɛn ne NIST dwumadie wɔ quantum-safe cryptography mu?

Ɔman Asoɛe a Ɛhwɛ Gyinapɛn ne Mfiridwuma So (NIST) de mfeɛ pii ayɛ adwuma de ayɛ quantum-safe cryptographic algorithms gyinapɛn. Wɔ afe 2024 mu no, NIST wiee ne mfitiaseɛ a wɔpaw no, a ɛyɛ anammɔn a ɛho hia ma adetɔnfoɔ ne wɔn a wɔyɛ no sɛ wɔbɛhyɛ aseɛ de saa gyinapɛn foforɔ yi adi dwuma wɔ softwea ne hardware mu. Saa gyinapɛn yi hwɛ ma adwumayɛkuo a ɛyɛ adwuma bom na ɛma ɔkwan a emu da hɔ, a wɔahwɛ mu ma ahyehyɛdeɛ sɛ wɔbɛdi akyi berɛ a wɔrema wɔn ahobanbɔ ayɛ yie.

Ɛyɛ den dɛn sɛ wobɛma wo ho akɔ quantum-safe HTTPS so?

Nkɔsoɔ no yɛ adwuma titire a ɛfa wɛb servers, client software, ne digital certificates a wɔbɛsesa ho. Ɛnyɛ nsakrae a ɛyɛ mmerɛw ara kwa; ɛhwehwɛ sɛ wɔyɛ nhyehyɛe na wɔsɔ hwɛ na ama wɔahwɛ ahu sɛ ɛne ne ho hyia. Nanso, sɛ wufi wo kuw no nhomasua ase ntɛm a, ɛma adeyɛ no yɛ mmerɛw. Platforms te sɛ Mewayz ma adesua akwan a wɔahyehyɛ a ɛwɔ module 207, na ɛma ɛyɛ nea ne bo yɛ den ($19/ɔsram) sɛ wobɛma wo developers no ahu ntɛm wɔ dwumadie ho nsɛm ne nneyɛeɛ pa ho.