ETRI develops next-generation digital certificate validation tool for quantum computing era

A technology has been developed that allows researchers to create and validate next-generation digital certificates designed to remain secure in the quantum computing era.

The Electronics and Telecommunications Research Institute announced it has developed QuantumPKI Studio, an integrated research platform that can generate, analyze and validate — in a single workflow — the structures of conventional public key infrastructure certificates, post-quantum cryptography certificates and hybrid certificates.

The platform supports RSA- and ECC-based X.509 certificates alongside a broad range of international and domestic post-quantum cryptography algorithms.

ETRI designed the platform to support three hybrid certificate structures: a composite type, which combines conventional cryptography and post-quantum cryptography into a single certificate structure; a bind type, which links a conventional certificate and a post-quantum cryptography certificate; and a chameleon type, which embeds reconstruction information inside a base certificate so that a post-quantum cryptography certificate can be reconstructed when needed.

Using the platform, researchers can compare and analyze the structural differences between conventional and post-quantum cryptography certificates, extension fields in hybrid certificates, the verification process between certificates, and the reconstruction flow of chameleon-type certificates.

ETRI expects the technology to serve as a core validation foundation for preparing the broader PKI ecosystem — including digital certificates, certificate authorities, electronic signature systems, hardware security modules and certificate validation solutions — for the transition to post-quantum cryptography.

Particularly before deployment in live services, the platform is expected to help reduce potential trial-and-error and compatibility issues by allowing researchers to demonstrate and validate various certificate structures and transition scenarios in advance.

"The transition to post-quantum cryptography is not simply a matter of swapping out a cryptographic algorithm — it is a complex challenge in which the entire certificate structure and verification framework must change together," said Kim Geon-woo, a researcher at ETRI's Cryptographic Engineering Research Laboratory within its Cybersecurity Research Division. "This technology is significant in that it provides a practical research foundation for reviewing and demonstrating in advance the full scope of that transition, where the certificate structure and verification framework change as a whole, not just the algorithm."