Impact of Quantum Computing on Encryption

Quantum computers will break RSA encryption, but NIST-approved replacements already exist. The real challenge is the massive infrastructure overhaul required to switch over, which demands time, dedicated teams, and expert vendors to avoid making things worse.
Chapters
With the reliance on encryption today, what should we be doing with the introduction of the commercial availability of quantum computing in the next couple of years? Are there certain processes, certain tools, certain products we should be looking at since we've been reading that quantum is gonna yield encryption not effective?
Yes and no. Quantum will undermine certain types of encryption where you've got key pairings. So think RSA. The bulk of a lot of the transactions we use actually on the internet, on the World Wide Web, is using that type of encryption, asymmetric kind of encryption. So yes, we do need to move those. And we do have new algorithms that are approved through NIST, a series of them that can replace it. My big piece of advice is don't be surprised. Anytime that we're gonna transition to new technology and our old algorithms that are susceptible need to be replaced with quantum-resistant ones, that means there's an infrastructure change, a change to applications, a change to security and oversight, all sorts of different things that need to happen in order to transition well. It takes time. It takes time. And we're going to see more and more service providers automatically switch over So expect your cloud provider to already do it for their communications. But if you have internal communications within the apps that you're using or whatnot, you may have to have your own program. But get a team together, figure out what your exposure is, what you want to move to, and then start choosing some vendors to work with to develop that. Because again, doing encryption is easy, except when it's easy, typically it's not done well. Doing encryption well is extraordinarily difficult, even just the implementation of it. So most organizations are going to need to work with experts, trusted vendors, to make sure that they move that transition and they manage that in an appropriate way, not leaving more exposure than what they started with.
More from Matthew

The Future of Cybersecurity: How AI Is Exploiting Technical, Behavioral, and Process Vulnerabilities









