THE CYBER INTERVIEW
for multiple post-quantum and classical encryption algorithms to be incorporated into VPNs , ensuring no disruption to the functioning of existing IT systems , and protecting data from attack by both classical and quantum computers .
At-risk organisations might also consider establishing secure end-to-end messaging infrastructures that they control and can quantum-proof today . Such an approach allows different business processes to be created within an end-to-end secure environment so critical data is verifiably quantum-safe throughout its lifecycle .
Speaking more generally , anyone looking to migrate to post-quantum cryptography ( PQC ) should have three things front of mind at the very least when discussing solutions : crypto-agility , backward compatibility and hybridisation . The use cases where encryption is needed vary across industries and sectors , so adopting a crypto-agile approach – where different algorithms can be used and combined within encryption solutions – will give you a greater level of flexibility . Crypto-agility means it is easy to swap in and out of any algorithms , without the need to modify protocols , as well as ensuring backward compatibility with existing systems .
If you want to move quickly , a hybridised approach is also vital . Hybridisation means today ’ s algorithms can be combined with quantum-safe cryptography in a single solution . Taking this approach means that it ’ s possible to keep the tried and tested classical cryptography we use today , like RSA or Elliptic Curve , alongside one or more post-quantum algorithms , while also helping security teams to prioritise the adjustments they tackle first when entering the migration phase . As standardisation of PQC algorithms is still being finalised over the next two years , it is a sensible risk and efficiency management approach to take by combining pre and post-quantum cryptographic primitives .
Q . WHERE DO YOU SEE THE FIELD OF QUANTUM DATA SECURITY HEADING IN THE NEXT DECADE , ESPECIALLY AS QUANTUM COMPUTERS BECOME MORE ACCESSIBLE ?
» Quantum security has not received as much attention as the development of quantum computers , especially when you look at funding . But this is starting
22 November 2023