Skip to content

README: reflect merged restructuring and list candidate entries #45

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
m-khan-97 wants to merge 1 commit into
base: main
Choose a base branch
from
Open

README: reflect merged restructuring and list candidate entries #45

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 18 additions & 5 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -74,12 +74,12 @@ existing classical cryptography must be replaced with post-quantum equivalents.
QS08-QS10 address the **platform surface** - risks to organisations running
workloads on quantum computing platforms.

> **Candidate restructuring under Sprint 1 discussion (see #11):** QS01 and
> QS02 have merged into a single Harvest-Now-Decrypt-Later entry covering both
> **Restructuring landed (see #11, merged via #38):** the former QS01 and QS02
> have merged into a single Harvest-Now-Decrypt-Later entry covering both
> in-transit and at-rest confidentiality exposure under Mosca's inequality;
> QS02's signature and credential-lifetime content moved into QS03. This frees
> a slot pending the Sprint 1 candidate list - not a claim that any specific
> replacement is already decided.
> QS02's signature and credential-lifetime content moved into QS03. This freed
> a slot in the numbering, which the candidate entries below are under review
> to fill - no replacement is decided yet.

| ID | Risk | Primary anchor |
|----|------|----------------|
Expand All @@ -97,6 +97,19 @@ Each entry follows a common [template](quantum-top-10/_template.md): description
common examples, prevention, example attack scenarios, references, and a
standards-and-regulatory mapping.

### Candidate entries under review

These proposals have merged into [`quantum-top-10/`](quantum-top-10/) with a
`QSxx` placeholder rather than a number, pending Sprint 1 community ranking.
None is confirmed for v1, and inclusion here is not an indication of outcome.

| Candidate | Risk | Surface | PR |
|---|---|---|---|
| [QSxx](quantum-top-10/QSxx_Compliance-Obligations.md) | Compliance Obligations | Migration | [#13](https://github.com/OWASP/quantum-security-project/pull/13) |
| [QSxx](quantum-top-10/QSxx_Misdirected-Quantum-Countermeasures.md) | Misdirected Quantum Countermeasures | Migration | [#20](https://github.com/OWASP/quantum-security-project/pull/20) |
| [QSxx](quantum-top-10/QSxx_Insecure-Quantum-Software-Supply-Chain.md) | Insecure Quantum Software Supply Chain | Platform | [#39](https://github.com/OWASP/quantum-security-project/pull/39) |
| [QSxx](quantum-top-10/QSxx_Unverifiable-Quantum-Execution-and-Result-Assurance.md) | Unverifiable Quantum Execution and Result Assurance | Platform | [#22](https://github.com/OWASP/quantum-security-project/pull/22) |

---

## Community calls
Expand Down