POST-QUANTUM CRYPTOGRAPHIC INVENTORY ANALYSIS AND PERFORMANCE BENCHMARKING FOR THE DEPARTMENT OF THE AIR FORCE

Quantum computers (QC) in the hands of adversarial nation states could devastate the U.S. and its national security systems if post-quantum cryptography (PQC) that resists code-cracking is not implemented in time since PQC deployment across national security systems is expected to take up to 20 years to complete. Meanwhile, adversaries are gathering encrypted data that they intend to exploit once they deploy quantum computers. In May 2022, the White House published National Security Memorandum (NSM-10) "Promoting United States Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems." The NSM stipulates agencies must establish partnerships with industry to promote the development of quantum technology and the effective deployment of PQC. Central to this migration effort is an emphasis on cryptographic agility, which will allow for a more seamless transition to post-quantum computing (PQC) and future cryptographic standards – reducing the time, costs, and risks to migration. Formerly of Alphabet@Sandbox (Google), SandboxAQ proposes to use the BESPIN (PEO BES) test network to determine actions required to transition critical networks to Cryptica PQC software. We will also be investigating DAF critical networks for scaled migration and implementation to support a Phase II proposal to prototype PQC implementation and secure DAF critical infrastructure from future quantum attacks.