Migrating to Quantum-Safe Infrastructure
Today’s security infrastructure will not be fit for purpose in a post-quantum computing world. Much of the cryptography we currently depend on for authentication, integrity, and confidentiality of data is based on public key encryption algorithms. The exponential growth in computing power represented by quantum computers makes the mathematical problems used in the current public-key schemes obsolete. To ensure long-term data protection, IT and communications-network operators must adopt quantum-safe technologies as quickly as possible.
Quantum computing: an unprecedented threat
Today, both cryptography and other security systems are integrated throughout all layers of the technology stack. Most cyberattacks begin at the top of the stack, at the user level, requiring the attacker to circumvent multiple layers of defense to gain access to the core systems that host valuable data.
The quantum threat inverts this process, enabling attackers to easily access the data at the bottom of the stack by simply tapping the network infrastructure layer.
Although there are no cryptographically relevant quantum computers available right now, billions are being invested by government and commercial organizations across the globe in a race to be first to bring a quantum computer to market. However, this doesn’t mean that today’s data is safe from the quantum threat.
“Harvest now, decrypt later”
Much of the data currently transmitted across private and public networks has long-term value. Commercially sensitive data, such as medical and financial records, IP, and personally identifiable data can all be captured today and decrypted later. The “harvest now, decrypt later” (HNDL) threat thus impacts the confidentiality of critical information.
In addition to the data’s inherent value, it is often regulated by data-retention policies that require safeguarding the data for its lifetime, which varies widely across industry sectors. The HNDL attack vector represents a very current threat to tomorrow’s data security. Any entity transferring data with long-term secrecy requirements should move to quantum-safe cryptography now.
The largest cryptographic migration ever
Industry experts warn that a cryptographically relevant quantum computer, which could implement Shor’s algorithm with large enough data sets, will be available by the end of the decade. Since history has shown that cryptographic migrations are much more complex and lengthier than expected, the importance of mitigating the HNDL threat in a timely fashion should not be underestimated.
It is worth recognizing that organizations can now leverage multiple cryptographic technologies to both lower the migration risks and costs, as well as to achieve long-term resilience against the rapidly emerging quantum threat. It is crucial not to allow a potential lack of internal expertise or the overwhelming complexity of migration to expose your organization to significant liabilities.
Implementing post-quantum cryptography won’t happen overnight
Tackling the complexity
For many organizations, cryptography has been a blind spot, as typically not managed as a strategic asset. Only now are many coming to grasp that cataloguing and triaging cryptography is difficult, time consuming, and error prone. To identify all the types risks of exposure, organizations will need to decide how to mitigate the impact: what can be avoided, what can be reduced, what can be insured against, and what will just have to be accepted as a residual risk.
Being aware of timing
Upgrading infrastructure will require greater visibility of how and where cryptography is currently being used. Legacy systems will need to be upgraded or replaced entirely. The process of identifying and documenting every instance of cryptography, every library, and every certificate will be time consuming, complex, and expensive, which means the timelines for migration will vary significantly between assets.
This is just the first step in a process that will require continuous auditing. risk assessment, road mapping, and potentially perpetual upgrading of systems with every upcoming standard. For many entities, this process is expected to take a decade or more, moving the migration timeline beyond the acceptable risk to confidential assets and well into the quantum threat horizon.
About ID Quantique
ID Quantique (IDQ), founded in 2001, initially operated as a spin-off company of the University of Geneva, working on research projects to demonstrate the feasibility of quantum key distribution (or QKD, also known as quantum cryptography). In late 2003, IDQ developed the first QKD product for data centers to protect data in transit. 20 years later, IDQ released its 4th generation of quantum key distribution systems and remains the market leader in quantum safe cryptography and quantum sensing solutions. It maintains close ties with academic institutions by participating in numerous research programs and plays a leading role in cutting-edge projects to drive innovation to the market.
To request more information or a quotation for any ID Quantique products, contact IL Photonics.