Preparing Identity Ecosystems for Continuous Cryptographic Change

Quantum computing promises to transform areas ranging from scientific research to advanced computation, but at the same time will have the ability to undermine much of the public-key cryptography on which today's digital systems depend.

For identity authorities, the challenge is not simply to adopt a new generation of algorithms. It is to manage a prolonged transition in which established and post-quantum cryptographic mechanisms will need to coexist.

This article draws on Veridos' white paper 'The Quantum Risk in Identity Ecosystems: Managing the post-quantum migration window', which examines the particular implications of that transition for passports, national identity systems and digital credentials.

A particular set of problems

Identity ecosystems present a distinctive migration problem. Unlike many IT environments, they combine long-lived credentials with specialised hardware, certification processes and international trust infrastructures. A passport chip or national identity card cannot necessarily be upgraded in the same way as a software application, while border systems and public key infrastructures may remain in service for many years.