ADR-007: Post-Quantum Cryptography Migration Strategy #3072
+981
−0
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Quantum computers will eventually break RSA/ECDH used in TLS connections, and adversaries are already recording encrypted traffic for future decryption ("harvest now, decrypt later" attacks). This ADR documents Openfire's quantum readiness and proposes a phased migration strategy.
Key findings:
- Property encryption (Blowfish/AES with PBKDF2) is already quantum-resistant
- TLS connections using RSA-2048 will need hybrid PQC by 2028
The proposed timeline aligns with NIST PQC standards (FIPS 203/204/205) and coordinates with the broader XMPP ecosystem migration.
See: ADR-001, ADR-004, ADR-005, ADR-006 for related encryption decisions
Member
Author
|
This was generated after a question arose in discussion around the recent encryption improvements. It appears to be useful and perhaps is something that should be considered, so I've created this PR to see if that holds true. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Context
With NIST publishing the first post-quantum cryptography standards in August 2024 (FIPS 203, 204, 205), and "harvest now, decrypt later" attacks already active, it's prudent to document Openfire's quantum threat exposure and plan for migration.
Key Findings
Proposed Timeline
Technology Choices
Why This Matters
Related ADRs
Notes for Reviewers
This ADR is intentionally forward-looking. It documents current quantum readiness and proposes a migration strategy, but does not require immediate implementation. The "Proposed" status indicates this is open for community discussion before acceptance.
Key questions for reviewers: