Advanced cryptographic schemes and High-Assurance high-speed cryptographic implementations

Expected Outcome

Proposals are expected to contribute to one or more of the following:

• Quantum-resistant cryptographic primitives, also other than lattice-based approaches if relevant, that enhance the security and privacy of digital wallets, both for natural persons and wallets, as well as the design and implementation of post-quantum solutions for entity authentication and authenticated key establishment over insecure networks;
• Formal verification tools, improved High-Assurance Cryptographic Software (HACS) approaches and their integration in software workflows, to provide strong security guarantees in post-quantum migration, and enable streamlined evidence-based evaluation of secure systems that use cryptography.

Scope

The development of new digital signatures and advanced cryptographic schemes, tailored specifically to the use cases and requirements in the context of wallets/eIDs, for privacy and business applications is highly relevant nowadays. Moreover, these devices need secure connections over insecure networks requiring protocols for entity authentication, authenticated key establishment, as well as Password Authenticated Key Exchange (PAKE) schemes for ensuring user authentication via passwords in different use cases and for data recovery protocols of Wallet data.

Another key area is the development of High-Assurance Cryptographic Software (HACS), including automated evaluation methods.

Considering the above, proposals should address one of the following technology areas:

• Design and implementation of PQC advanced schemes and protocols for enhanced security and privacy, also including schemes other than lattice-based approaches if relevant. Proposals should also include recommendations that balance security, performance, and usability in practical applications and be based on open-source reusable software libraries.
• Development of a unified specification language to formalise and document conditions on cryptographic safety and security in software implementations; development and improvement of tools and methodologies that can be used to evaluate both the implementation and the usage of cryptography in software applications and provide formal machine-checked guarantees of correctness and security. Proposals should also consider improving existing HACS tools and their integration in such software implementations.