AWS POST-QUANTUM CRYPTOGRAPHY MIGRATION PLAN

Summary from the TLDR InfoSec newsletter

AWS is preparing for post-quantum cryptography (PQC) by implementing NIST-approved algorithms to protect against future quantum computer threats to public key cryptography. Its migration plan consists of four workstreams: creating an inventory of current crypto usage (prioritizing data-in-transit), updating asymmetric key derivation between AWS endpoints and customers, addressing long-term digital signature keys, and handling short-term session signature keys. AWS recommends organizations prepare by making an inventory of their cryptography usage and upgrading to TLS 1.3.