fabric icon indicating copy to clipboard operation
fabric copied to clipboard

Support post-quantum crypto algorithms

Open bestbeforetoday opened this issue 3 years ago • 7 comments

As a business application developer I want to use post-quantum crypto algorithms with Fabric So that the integrity of business data is maintained as quantum computing technology advances

NIST has selected some quantum-resistant cryptography algorithms:

https://www.nist.gov/news-events/news/2022/07/nist-announces-first-four-quantum-resistant-cryptographic-algorithms

It would be good for Fabric to support use of one or more of these algorithms (or future recommendations) as an alternative (or in addition) to the existing ECDSA cryptography for securing messages and ledger data. This could also extend to the cryptography used for secure (TLS) gRPC connections, although that might be better tracked as a separate issue.

Current post-quantum crypto algorithms are available as a Golang module here:

https://github.com/open-quantum-safe/liboqs-go

bestbeforetoday avatar Nov 01 '22 16:11 bestbeforetoday

https://github.com/hyperledger/fabric/discussions/3880, maybe for post-quantum crypto algorithms we can impl in a specific repo as decouple bccsp from fabric repo?

SamYuan1990 avatar Feb 09 '23 13:02 SamYuan1990