PQ for VPNs: Implications for CC Evaluations of VPN Gateways (R03b)
One of the most common ways of evaluating VPN Gateways in Common Criteria has been using NDcPP and PP-Module for VPN Gateways. This requires the Target of Evaluation (TOE) to support IKE and IPsec protocols. These protocols have not been updated to incorporate the use of standardised PQ Cryptography algorithms. Quantum computers can break current asymmetric algorithms that are mandated for use with IKE. We provide a brief overview of the IKE and IPsec protocols and see how RFC 8784 can be used to provide quantum resistance in IKEv2.