PIQASO: Post-Quantum Cryptography As-a-Service for Common Transmission Systems and Infrastructures

PiQASO aspires to provide fully optimized and operational implementations as-a-service for an ensemble of crypto algorithms and protocols, including key encapsulation, digital signatures, (authenticated) key exchange, authorization, identity management, long-term data security, multi-party secure computation, providing a fully functional equivalent of Public Key Infrastructure (PKI) which is robust against future algorithmic and quantum computing advances but also practical enough to be integrated in CTS and infrastructures without the need of any additional specialist hardware to be installed on the client side, thus, enabling quantum-safe application-layer encryption/decryption services that can be consumed by any legacy system. The envisioned solution includes the development of programmable optimizations and accelerators capable of enhancing the execution of a multitude of crypto families, in a cost-effective manner, with the additional benefit of designing for crypto agility; the ability to reconfigure an application or system with a different PQ crypto algorithm or implementation depending on requirements and resource availability. PiQASO crypto agility is supported through the provision of operational (specification) implementations of NIST final candidates enabling quantum-safe application-layer encryption/decryption services that can be consumed by any legacy system. This aims to enable users and systems to make coordinated transitions in a policy- and compliance governed manner. Furthermore, PiQASO’s PQC Ensemble is offered through a set of design modalities with certifiable security. Moreover, PiQASO features an extensive and ambitious demonstration plan involving 14 end-users from diverse industrial sectors, such as automotive, automation, finance, energy, healthcare, aerospace, online media, unmanned aerial vehicles and transportation.