Guía Estratégica de Migración a Criptografía Post-Cuántica (PQC) en Entornos Empresariales: Comparativa NIST y Marco de Implementación

Resumen

This technical report provides a strategic framework for enterprise migration toward Post-Quantum Cryptography (PQC), aligned with the NIST standardization process. It includes a comparative analysis of the main algorithms (ML-KEM, ML-DSA, Falcon, SPHINCS+) and practical recommendations for adoption across critical corporate services such as TLS, VPN, PKI, code signing, DevSecOps supply chain, and compliance evidence sealing. The document proposes a phased hybrid migration roadmap (classical + PQC) over a 12–24 month horizon, enabling organizations to mitigate the “harvest now, decrypt later” threat while maintaining operational compatibility.