In our previous newsletter, we explored the disruptive potential of quantum computing and the urgency for organizations to prepare for the quantum threat. As traditional encryption algorithms like RSA and ECC become vulnerable, a new frontier in cybersecurity has emerged — quantum-safe cryptography.

Transitioning to Quantum-Resistant Algorithms

Transitioning to quantum-resistant algorithms is a crucial step in the evolution of cryptography, especially in the face of the potential threat posed by quantum computers.

1. The Need for Quantum-Resistant Algorithms

Sensitive electronic information, such as email and bank transfers, is currently protected using public-key encryption techniques, which are based on math problems a conventional computer cannot readily solve. However, a sufficiently powerful quantum computer could solve these problems, defeating the encryption. Hence, the need for quantum-resistant algorithms.

2. The Role of NIST

The National Institute of Standards and Technology (NIST) has been at the forefront of this transition. In 2022, NIST selected four algorithms designed to withstand attack by quantum computers. These include CRYSTALS-Kyber, designed for general encryption purposes such as creating secure websites, and CRYSTALS-Dilithium, designed to protect the digital signatures we use when signing documents remotely. Draft standards for three of the four algorithms were released in 2023, with a draft standard for the fourth algorithm, FALCON, expected in 2024.

3. The Role of the NSA

The National Security Agency (NSA) has also released the "Commercial National Security Algorithm Suite 2.0" (CNSA 2.0) Cybersecurity Advisory to notify National Security Systems (NSS) owners, operators, and vendors of the future quantum-resistant (QR) algorithm requirements for NSS. The algorithms in CNSA 2.0 have been analyzed as secure against both classical and quantum computers.

4. The Future

In 2024, NIST is expected to conclude a seven-year process and publish the first set of Post-Quantum Cryptographic (PQC) algorithms, with the ultimate goal of establishing new, secure, quantum-computer-resistant encryption standards.

Companies That Have Begun Transitioning to Quantum-Safe Algorithms

• Microsoft, AWS, VMware, Cisco Systems, and Samsung are among the twelve companies that the National Institute of Standards and Technology (NIST) has selected to guide the nation's migration to cryptographic standards that are immune to the computational power of a quantum machine.
• The Linux Foundation announced the launch of the Post-Quantum Cryptography Alliance, an open and collaborative initiative to drive the advancement and adoption of post-quantum cryptography. Founding members include Amazon Web Services (AWS), Cisco, Google, IBM, IntellectEU, Keyfactor, Kudelski IoT, NVIDIA, QuSecure, SandboxAQ, and the University of Waterloo.

These companies' transitions to quantum-safe algorithms demonstrate the importance of addressing the critical needs of clients as they consider transforming their cryptography for the quantum era.