Are we prepared for the deployment of a functional quantum computer? This week, Technology Now is returning to the topic of post-quantum, and we pose the question: when it comes to migrating your systems to quantum-resistant cryptography? We ask why the deadline for migrating to PQC-enabled systems has been moved up, we discover what a quantum computer actually needs to be cryptographically relevant, and we pose the question: when it comes to migrating your systems to quantum-resistant forms of encryption, could it already be too late for some people to start?
This is Technology Now, a weekly show from Hewlett Packard Enterprise. Every week, hosts Michael Bird and Sam Jarrell look at a story that’s been making headlines, take a look at the technology behind it, and explain why it matters to organizations.
Based on content from HPE
In our digitally woven world, the sanctity of encrypted data is upheld by cryptographic algorithms—they form a robust shield against unauthorized access, keeping our personal, financial, and sensitive information secure. But, what if this fortress is not as impenetrable as we’ve believed, especially in the dawning age of quantum computing? This question looms large as we delve into the imperative matter of post-quantum cryptography (PQC).
Traditionally, cryptographic security relies on the intractability of certain mathematical problems. Imagine trying to reverse-engineer an encryption without the keys—a task deemed impossible within a human lifetime, even for the most advanced supercomputers, taking millions, even billions, of years. But quantum computers—birthed from the nebulous marvels of quantum mechanics—could rewrite these odds, solving these arduous problems in conceivable timeframes.
This possibility has prompted a shift in timelines for adopting quantum-resistant encryption methods. In a candid conversation with Nigel Edwards, HPE’s Director of the Security Lab, it’s clear that the world is moving toward PQC faster than anticipated. Originally estimated to necessitate migration plans by 2035, some experts now warn that by the early 2030s, current encryption protocols could become obsolete.
Why this urgency? It’s not just a buzzword frenzy. Recent advancements have slashed the resource requirements for quantum algorithms substantially—what once required an entire galaxy of physical qubits may soon demand far less. Coupled with projections of exponential growth, akin to a quantum Moore’s Law, the window to fortify our digital defenses is rapidly narrowing. As Edwards notes, once the first cryptographically relevant quantum computer breaches the horizon, previously secure RSA keys could crumble.
So, what makes a quantum computer cryptographically relevant, and why aren’t we panicking today? According to Edwards, today’s hurdle is the engineering challenge of managing quantum noise—the cacophony that disrupts qubit coherence. But the industry is on a relentless march to refine quantum error correction, signaling a metaphorical cliff edge. When we reach it, current cryptographic foundations may no longer hold.
The response from the tech industry is a strategic deployment of PQC algorithms, recently standardized by the National Institute of Standards and Technology (NIST). Yet, the transition isn’t as simple as flipping a switch or a patch update. Consider the hardware; silicon cannot instantly morph to embrace new cryptographic designs. The evolution of technology thus becomes a dance of updating software and replacing hardware gradually, meticulously planning each step.
The infrastructural transition from classical to quantum-resistant hardware demands foresight. It involves integrating PQC-capable processors and ensuring every component, from the modest network controller to high-performing servers, is attuned to these advancements. But such a metamorphosis comes with its own risks. New algorithms, untested and not yet battle-hardened compared to decades-old RSA, introduce uncertainties.
This is where HPE’s dual strategy enters—a cautious yet proactive step, using both classical and novel quantum algorithms. This dual signing ensures that while we tread into this uncharted quantum territory, we anchor some of our hopes in the familiar legacies of existing encryption standards.
But herein lies a vital question—one that has an unsettling edge: Are businesses truly prepared? Despite the talk, are enough proactive steps being taken, or are many still shuffling, acknowledging the threat yet left faltering under its weight? With timelines compressing, how prepared are individual organizations, sectors, indeed entire industries, to renew their cryptographic defenses? The reality for some may be a game of catch-up, scrambling as the quantum tide rises.
The sky darkens with a growing urgency for cybersecurity as quantum computing begins to reveal its potential not just as a scientific marvel, but as a disruptor to the status quo. It’s a call to action, an invitation to contemplate deeply: in the face of such profound technological shifts, how do we navigate the delicate balance between innovation and the vulnerabilities it inevitably exposes? The answers could shape the security landscape for years, if not decades, to come.
—
