Canada’s migration to post-quantum cryptography : public-private roles

Title page 1

Contents 4

About the Authors 5

Acronyms and Abbreviations 6

Executive Summary 7

Introduction 9

Risks of the Quantum Threat 12

Deployment Challenges 15

Incentives and Market Forces 23

Standards, Certification and Regulation 28

Varying Regulatory Frameworks 33

Evaluation of Public-Private Sector Roles in Canada 39

Conclusion: Policy Recommendations and Next Steps 41

Appendix 1: Research Methodology 50

Appendix 2: Certification and Testing Processes 52

Appendix 3: Government Cryptographic Standards and Security Policies 53

Appendix 4: Additional Resources on PIPEDA 55

Appendix 5: Terminology 56

Works Cited 58

Tables 11

Table 1. Interview Participants, by Occupational Role and Sector 11

Table 2. Overview of Regulation, Standardization and Certification in PQC Adoption 27

Table 3. Comparative Analysis of National Approaches to PQC Migration Preparedness 37

Table 4. Comparison of Cryptographic Algorithm and Module Validation Processes 52