{"id":22465,"date":"2022-07-08T19:12:09","date_gmt":"2022-07-08T19:12:09","guid":{"rendered":"https:\/\/www.esecurityplanet.com\/?p=22465"},"modified":"2022-07-08T19:12:11","modified_gmt":"2022-07-08T19:12:11","slug":"quantum-safe-cryptography-standards","status":"publish","type":"post","link":"https:\/\/www.esecurityplanet.com\/trends\/quantum-safe-cryptography-standards\/","title":{"rendered":"New Quantum-safe Cryptography Standards Arrive None Too Soon"},"content":{"rendered":"\n

A six-year quantum cryptography competition just ended, producing four new security standards<\/a> selected by the U.S. Department of Commerce\u2019s National Institute of Standards and Technology.<\/p>\n\n\n\n

The announcement comes on the heels of a few major strides in quantum computing accessibility and speed\u2014and may hopefully stave off the growing quantum security threat.<\/p>\n\n\n\n

The NIST contest began in 2016, with the goal of improving general encryption<\/a> and digital signatures. The four new security standards selected by NIST will become part of a quantum-safe cryptography standard released as soon as 2024. But these new standards can\u2019t come soon enough.<\/p>\n\n\n\n

Quantum technology is accelerating\u2014and with it, the quantum threat. 2022 has seen startups with quantum-as-a-service (QaaS) solutions, leading companies partnering to create interconnected quantum computing networks<\/a>, and major world powers competing to become the leaders of quantum technology<\/a>.<\/p>\n\n\n\n

Also read: Encryption: How It Works, Types, and the Quantum Future<\/a><\/p>\n\n\n\n

Quantum Computing is Already Here<\/h2>\n\n\n\n

Any science-fiction premise becomes exponentially less outlandish when it\u2019s sold as-a-service. UK-based Oxford Quantum Circuits just raised roughly $47 million in Series A funding<\/a> for its Quantum-as-a-Service platform, with the goal of putting quantum processing in the hands of everyone. But it\u2019s not unique.<\/p>\n\n\n\n

Amazon\u2019s Braket quantum computing marketplace became publicly available in 2020<\/a>\u2014a mere five years after IBM launched the first quantum computer on the cloud<\/a>. Meanwhile, QuTech, Eurofiber, and Juniper Networks may be on their way to creating the first quantum internet.<\/p>\n\n\n\n

Technological acceleration can happen in the blink of an eye. Two years ago, IBM released its Eagle quantum computer<\/a>\u2014at the time, the world\u2019s fastest quantum computer\u2014with 127 qubits of processing speed. Over the next few years, IBM intends to release the 433-qubit Quantum Osprey, followed swiftly by the 1,121-qubit Quantum Condor.<\/p>\n\n\n\n

Similarly, last month, Quantinuum\u2019s System Model H1 quantum computer broke a quantum milestone<\/a>, processing 20 qubits of data\u2014a tremendous upgrade from the previous 12. JP Morgan Chase used the quantum computer to develop an algorithm for natural language processing. As new technologies emerge, acceleration is occurring at all layers of the quantum computing industry.<\/p>\n\n\n\n

Also read: Top Cybersecurity Startups to Watch in 2022<\/a><\/p>\n\n\n\n

The Coming Quantum Security Meltdown<\/h2>\n\n\n\n

Quantum computing has tremendous implications for the fields of natural language processing, machine learning, and artificial intelligence. When computers are able to \u201cthink\u201d extraordinarily fast, they can also think with incredible depth and complexity. However, this introduces significant security risks: What happens when a malicious application can think and adapt much faster than the leading security solutions<\/a>?<\/p>\n\n\n\n

And for encryption, the problem is just as much thought as it is raw power. With enough raw power, anything can be broken.<\/p>\n\n\n\n

Those in the security industry have known for some time that quantum computing will<\/em> break our current security standards. Earlier in the week, Toshiba partnered with Safe Quantum<\/a> to develop new quantum key distribution and quantum communications technologies.<\/p>\n\n\n\n

According to the CEO and founder of Safe Quantum, John Prisco, \u201c2022 will mark the year we see commercial quantum technology really take off, as more innovators see the future quantum-secure world as the ultimate way to protect data.\u201d<\/p>\n\n\n\n

But with many enterprises still struggling with the skills gap introduced by the cloud, quantum computing has been sidelined by all but the most visionary.<\/p>\n\n\n\n

Also read: AI & ML Cybersecurity: The Latest Battleground for Attackers & Defenders<\/a><\/p>\n\n\n\n

IBM Experts Pave the Way Toward Quantum-Safe Cryptography<\/h2>\n\n\n\n

For years, IBM has been building a team of the best cryptographic experts in the world\u2014with the express purpose of developing quantum-safe schemes. By adopting new, quantum-safe cryptography standards before<\/em> quantum technology becomes readily available, enterprises hope to keep their data safe at least until the next major technological advancement\u2014and the next significant threat.<\/p>\n\n\n\n

Just as an eight-digit password was once considered nigh-unbreakable through brute force tactics, quantum computing has the potential of rendering our current cryptography and security meaningless. Large-scale, practical quantum computing could easily crack today\u2019s cryptographic standards. Even worse, quantum computing can \u201creach into the past\u201d\u2014data stolen today may be vulnerable to quantum threat tomorrow.<\/p>\n\n\n\n

It\u2019s hoped that the new NIST standards, including those developed by IBM, will let organizations prepare for future quantum threats and protect today\u2019s data against the challenges of the future. Companies concerned about becoming quantum-ready can engage with IBM\u2019s new, dedicated IBM Quantum-Safe portfolio<\/a> of technologies and consulting services.<\/p>\n\n\n\n

Also read: Rainbow Table Attacks and Cryptanalytic Defenses<\/a><\/p>\n\n\n\n

New NIST Standards Will Be Published in 2024<\/h2>\n\n\n\n

NIST’s new post-quantum cryptographic standards won\u2019t be published for commercial use until 2024. However, organizations are urged to start their preparations now<\/a> by auditing their current systems and testing the new cryptographic standards in a sandbox environment<\/a>.<\/p>\n\n\n\n

Four additional algorithms are also under consideration for inclusion in the standard, and NIST will announce finalists from that round at a future date.<\/p>\n\n\n\n

Among the four standards released this week, for general encryption<\/strong>, NIST has selected the CRYSTALS-Kyber<\/a> algorithm, which offers comparatively small encryption keys and speed of operation.\u00a0<\/p>\n\n\n\n

For digital signatures<\/strong>, NIST has selected three algorithms: CRYSTALS-Dilithium<\/a>, FALCON<\/a> and SPHINCS+<\/a>. The first two offer high efficiency. NIST recommends CRYSTALS-Dilithium as the primary algorithm, with FALCON for applications that need smaller signatures than Dilithium can provide.<\/p>\n\n\n\n

The third, SPHINCS+, is “somewhat larger and slower than the other two, but it is valuable as a backup for one chief reason: It is based on a different math approach than all three of NIST\u2019s other selections,” the agency said.<\/p>\n\n\n\n

NIST said three of the algorithms are based on a family of math problems called structured lattices, while SPHINCS+ uses hash functions.<\/p>\n\n\n\n

Between now and 2024, it\u2019s still possible that these new cryptographic standards could change. With the world of quantum computing moving incredibly fast, cryptographic standards must move quickly, too. And as organizations adapt to the new, post-quantum cryptographic standards, they must also ready themselves for one of the most momentous shifts in the history of computing.<\/p>\n\n\n\n

Read next: Cybersecurity Outlook 2022: Third-Party, Ransomware and AI Attacks Will Get Worse<\/a><\/p>\n\n\n

\n \n\n \n\n
\n \n <\/path>\n <\/svg>\n <\/div>\n \n
\n
\n

\n Get the Free Cybersecurity Newsletter <\/h3>\n \n \n

\n Strengthen your organization's IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices. Delivered every Monday, Tuesday and Thursday <\/p>\n <\/div>\n\n

\n
\n \n Email Address\n <\/label>\n \n <\/div>\n\n
\n
\n \n \n By signing up to receive our newsletter, you agree to our Terms of Use and Privacy Policy. You can unsubscribe at any time. <\/label>\n <\/div>\n <\/div>\n \n