MKQuantum / QSCServiceMesh

A POC to apply Quantum Safe Crypto (QSC) within a Service Mesh.
0 stars 0 forks source link

QSCServiceMesh

image

This POC is a collaboration between IBM, CIBC, and GitHub to leverage IBM's existing Quantum Safe Encryption ingress controller work for Kubernetes, and try and apply it to an ISTIO Service Mesh instance.

Service Mesh has the ability to abstract away security and othe cross-cutting concerns from Developers and leverages Kubernetes primitizes such as the Sidecar Pattern which can extend the functionality of a Service running in the Mesh without having to change the Service.

The POC will try and leverage the Sidecar Pattern to apply a Quantum Safe TLS encryption scheme to the Services running in the Mesh, without having to change the Services themselves. ISTIO Service Mesh has a feature called "Auto mTLS" which allows all inter-mesh to be mTLS encrypted without any configuration. This coud possibly be extended to Multiple Clusters across Multiple Cloud via the Submariner Project

A successful POC should demonstrate the ability to leverage Cryptographic Agility in an Enterprise Environment that is leveraging Service Mesh that needs to be protected against possible decryption of data by a future Quantum Computer running Shor's Algorithm or other future Quantum Software.