一句话:提出抗量子软件工程(QSSE)新方向与 AQuA 框架,为后量子密码迁移给出检测、语义重构与混合验证三支柱议程。
量子计算对网络安全的威胁推动了后量子密码(PQC)的标准化,但将遗留软件迁移到抗量子算法并非简单替换库,而是一项新的软件工程挑战:现有漏洞检测、重构与测试工具均未针对 PQC 的概率性行为、侧信道敏感性以及复杂的性能权衡而设计。本文提出了一类新型工具的愿景,并给出自动化抗量子适配(AQuA)框架,围绕三大支柱展开议程:PQC 感知的检测、语义级重构以及混合验证。通过这一框架,作者论证了抗量子软件工程(QSSE)应作为独立研究方向,以支撑安全、可靠且高效的后量子密码迁移。
The quantum threat to cybersecurity has accelerated the standardization of Post-Quantum Cryptography (PQC). Migrating legacy software to these quantum-safe algorithms is not a simple library swap, but a new software engineering challenge: existing vulnerability detection, refactoring, and testing tools are not designed for PQC’s probabilistic behavior, side-channel sensitivity, and complex performance trade-offs. To address these challenges, this paper outlines a vision for a new class of tools and introduces the Automated Quantum-safe Adaptation (AQuA) framework, with a three-pillar agenda for PQC-aware detection, semantic refactoring, and hybrid verification, thereby motivating Quantum-Safe Software Engineering (QSSE) as a distinct research direction.