Rethinking Cryptography in the Linux Kernel: Preparing for the Post-Quantum (PQC) Era

" summary

Practical steps for adding post-quantum cryptography (PQC) support to the Linux kernel, covering where to introduce PQC (kernel module signing, UEFI/firmware validation, IPsec/WireGuard key exchange, keyrings, and encrypted filesystems like fscrypt/dm-crypt). It discusses using hybrid schemes (e.g., Kyber + X25519), aligns with NIST guidance and industry efforts (PQCC, NCSC), and highlights migration risks, performance concerns, and concrete developer integration points and examples for incremental experimentation.

AI-written summary · about

" related talks

• 26mThe ABCs (Accelerated, Better and Cheaper) to Cryptographic ResilienceSudha Iyer · Post-Quantum Cryptography Conference 2025
• 48mPreparing for Quantum: A Pragmatic Approach towards ReadinessJaya Baloo, Donna Dodson · RSA Conference 2023
• 24mOvercoming Challenges in Post-Quantum Cryptography AdoptionFrank Michaud · Post-Quantum Cryptography Conference 2025
• 13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing ToolsMike Agrenius Kushner · SOSS Community Day Europe 2024
• 30mInvestigating Post-Quantum Cryptography: building a PQC decision tree for developersAlessandro Amadori, Jelle Don · Post-Quantum Cryptography Conference Amsterdam 2023
• 24mTransitioning to Post-Quantum Cryptography in IAMUdara Pathum · Post-Quantum Cryptography Conference 2025
• 22mPost Quantum Policy and Roadmap of the BSIStephan Ehlen · Post-Quantum Cryptography Conference Amsterdam 2023
• 30mPost-Quantum Crypto Integration for Enterprise ApplicationsAnselme Tueno · Post-Quantum Cryptography Conference Amsterdam 2023