PQC for PKI in IACS - Or Why Nobody Will Implement It

  • Forschungsthema:IT/OT-Security
  • Typ:Mastersthesis
  • Datum:03.03.2026
  • Betreuung:

    Marwin Madsen

  • Links:Tender
  • This thesis aims to evaluate current trends in Post-Quantum Cryptography (PQC) for Public Key Infrastructures (PKIs) in Industrial Automation and Control Systems (IACS).

MOTIVATION:

The Problem (a.k.a. "The Scary Part"):
    
While Industrial IoT devices are busy chatting across networks, current PKI security might soon become as useful as a chocolate teapot once quantum computers arrive. And here's the kicker, those devices have lifespans and innovation cycles longer than most celebrity marriages and in contrast are part of our critical infrastructure.

The Solution (a.k.a. "Your Thesis"):
    
You'll work on automating post-quantum certificate management for industrial systems. Previous research has shown that using Dilithium2 instead of classical ECDSA can make certificate request generation and response validation faster. Furthermore, Google and Cloudflare are going to start testing Merkle Tree Certificates for traffic using Chrome and talking to certain sites hosted on Cloudflare. But this won't include considerations for industrial plants.

GOALS:

  • Systematically analyze the gap between IT concepts and OT requirements
  • Evaluate the impact on certificate management schemes
  • Assessing composite certificate schemes that combine classical and post-quantum algorithms

HELPFUL PRIOR KNOWLEDGE:

  • Basic understanding of PQC
  • Interest in applied cryptography and industrial systems
  • Motivation to get familiar with Industrial Automation

 

BILD1: PQC X.509 Certificate
BILD2: loudflare Experiment