level of risk determination
y = Migration Time
× = Security Shelf Life
z = Time to Compromise
secret keys compromised
× + y > z
Post-Quantum Cryptography(PQC)
Cryptosystems which run on classical computers, and are believed to be resistant to attacks from both classical and quantum computers
How soon do we need to worry?
Theorem (Mosca): If x+ y > z, then worry
What do we do here??