A system for cryptographic agility with proxy task management

A computing system configured to swap a ciphersuite, the computing system comprising:

• a memory;
• and
• at least one processor coupled to the memory and configured to:
• perform, via a configuration agent of a control plane or a proxy of a data plane, cryptography based on a current ciphersuite, wherein the current ciphersuite comprises a current asymmetric algorithm, a current symmetric algorithm, a current cryptographic random number generator, or a current cryptographic hash function;
• receive, by the configuration agent and from a configuration orchestrator, instructions to invoke a protocol to swap the current ciphersuite;
• invoke, via the configuration agent and responsive to receiving the instructions, the protocol to swap the current ciphersuite;
• communicate, via a quantum secure layer (QSL) agent, a next ciphersuite algorithm from a set of ciphersuites to a key distribution center (KDC), wherein the next ciphersuite comprises a next asymmetric algorithm, a next symmetric algorithm, a next cryptographic random number generator, or a next cryptographic hash function;
• replace the current ciphersuite with the next ciphersuite;
• and
• perform, by the configuration agent or the proxy, cryptography based on the next ciphersuite.

A non-transitory computer readable medium storing executable sequences of instructions to:

• perform, via a configuration agent of a control plane or a proxy of a data plane, cryptography based on a current ciphersuite, wherein the current ciphersuite comprises a current asymmetric algorithm, a current symmetric algorithm, a current cryptographic random number generator, or a current cryptographic hash function;
• receive, by the configuration agent and from a configuration orchestrator, instructions to invoke a protocol to swap the current ciphersuite;
• invoke, via the configuration agent and responsive to receiving the instructions, the protocol to swap the current ciphersuite;
• communicate, via a quantum secure layer (QSL) agent, a next ciphersuite from a set of ciphersuites to a key distribution center (KDC), wherein the next ciphersuite comprises a next asymmetric algorithm, a next symmetric algorithm, a next cryptographic random number generator, or a next cryptographic hash function;
• replace the current ciphersuite with the next ciphersuite;
• and
• perform, by the configuration agent or the proxy, cryptography based on the next ciphersuite.