Segurança da Informação na Nuvem e Criptografia Pós-Quântica: Uma Revisão Bibliográfica

Abstract

The widespread adoption of cloud computing has transferred a security responsibility to users that is often underestimated. In the IaaS model, object storage repositories are exposed to misconfigurations, providers with access to stored content, and the threat of quantum computers capable of breaking the cryptographic algorithms currently in use. This work analyzes protection strategies for this environment in three layers. The first deals with confidentiality and access control via KP-ABE and PRE, techniques that allow the provider to operate on the data without ever seeing its content. The second addresses remote integrity verification through POR and PDP, which allow auditing the existence and completeness of files without needing to download them. The third examines post-quantum readiness, comparing the algorithms standardized by NIST with the QKD E91 protocol and the QuCloud hybrid framework, which combines both approaches to neutralize HNDL attacks. The analysis indicates that these techniques are not mutually exclusive: the choice between them depends on the risk profile of each organization, with sectors such as healthcare and government storing confidential data for decades, therefore they would have motivations to anticipate the post-quantum transition.