Many believe that Q-Day, the day when quantum computers can break existing encryption methods, is in sight, threatening our bank accounts, credit cards, medical records, and even critical infrastructure.
Government agencies, research organizations, and vendor consortiums are aware of the advances made in quantum computing and are developing PQC (post-quantum cryptography) initiatives to develop encryption methods that can counter the threats. In 2023, csoonline.com identified at least 11 notable initiatives, programs, standards, and resources launched to help the creation, development, and migration to PQC. Some of these initiatives include:
CISA, NSA, and NIST are urging organizations to start preparing for the implementation of post-quantum cryptography and set forth guidelines for action, such as:
- Establish a Quantum-Readiness Roadmap.
- Engage with technology vendors to discuss post-quantum roadmaps.
- Conduct an inventory to identify and understand cryptographic systems and assets.
- Create migration plans that prioritize the most sensitive and critical assets.
The Linux Foundation has launched the Post-Quantum Cryptography Alliance (PQCA), an open and collaborative initiative to drive the advancement and adoption of post-quantum cryptography. The PQCA brings together industry leaders, researchers, and developers to address cryptographic security challenges posed by quantum computing, through the production of high-assurance software implementations of standardized algorithms, while supporting the continued development and standardization of new post-quantum algorithms.
Other efforts include the Internet Engineering Task Force (IETF), which has launched a working group to coordinate quantum-resistant cryptographic protocols. Additionally, the UK government published new National Quantum Strategy detailing its 10-year plan for leading a quantum-enabled economy, recognizing the importance of quantum technologies for the UK’s security. And Google announced it was taking steps to make web browsing safe from future quantum computers by adding Chrome support for quantum-resistant encryption.
The medical field is keenly aware of quantum computing and its potential impact on medical devices. Medical technology relies heavily on embedded systems, so it is critical that these systems meet the high level of security required in the healthcare industry, while protecting both sensitive patient data and the Intellectual Property inherent in the software used in these devices.
In order to achieve long-term security and be able to react with sufficient speed to new cryptanalytic results, a high degree of crypto-agility – even across different PQC classes – must be developed. That is the main objective of a group from science and industry who is collaborating on the PQC4MED project. According to the PQC4MED consortium, in order to guarantee sustainable information security, crypto-agility must be achieved as early on as possible in the development of next generation devices.