开源软件中后量子密码学采用实践与挑战的实证研究
原标题：Understanding Post-Quantum Cryptography Adoption: Practices, Challenges, and Evolution in Open-Source Software
AI 摘要
该研究挖掘了179个开源仓库中的114,361次提交和5,713个issue，分析后量子密码学（PQC）在开源软件中的实现与维护实践。研究发现90%的PQC相关提交属于对已有支持的维护，构建、打包和依赖故障等功能性缺陷约占已分类问题的一半。在NIST于2024年完成标准化后，标准化算法名称出现在超过80%的PQC开发变更中，但首次实现并未显著增加。作者建议迁移计划应重视持续维护、构建可靠性和集成测试。
正文节选
Understanding Post-Quantum Cryptography Adoption: Practices, Challenges, and Evolution in Open-Source Software Abstract Post-quantum cryptography (PQC) standards establish algorithms for quantum-safe systems, but empirical evidence about how software projects implement and maintain PQC support remains limited. We investigate this implementation and maintenance work by mining 114,361 commits and 5,713 issues across 179 open-source repositories. We use human annotation and validated LLM classifica