Publication Peer Review

This paper investigates the convergence of asymmetric cryptography and Zero Trust architecture, exploring the utilization of asymmetric encryption to fulfill the core objectives of Zero Trust security. The Zero Trust security strategy is designed to combat contemporary cyber threats by assuming no implicit trust. Asymmetric cryptography, known for contributing to secure communications, authenticating users, and verifying data authenticity, strongly supports realizing the principles of Zero Trust.

Exploring the applications of asymmetric cryptography in Zero Trust scenarios focuses on authentication and data protection. In authentication, asymmetric cryptography is integral to Public-Key Infrastructure (PKI), utilizing digital signatures to authenticate users and devices.

Efforts to implement asymmetric cryptography in zero-trust environments should prioritize algorithm selection, considering factors such as security strength, computational cost, and key size. Additionally, robust key management practices, encompassing generation, distribution, storage, and revocation, are crucial for maintaining cryptographic integrity. Moreover, seamless integration with Identity and Access Management (IAM) systems is essential for efficient authentication and authorization processes.

In conclusion, asymmetric cryptography is a powerful enabler for Zero Trust. Its ability to establish secure communications, verify identities, and protect sensitive data is indispensable in achieving its objectives.