Government Hastens Deadline for Quantum-Resistant Security Measures
The government has expedited the timeline for the implementation of quantum-resistant encryption systems. This move is intended to shield key information belonging to militaries, financial institutions, governments, and common people from potential threats posed by quantum computers.
The recent directive, known as "Safeguarding the Nation from Advanced Cryptographic Attacks," mandates that critical computing systems transition to post-quantum cryptographic key set-ups by the end of 2030. Quantum-safe digital signature schemes should also be adopted by the end of 2031.
Addressing a Growing Threat
For many entities, this new deadline arrives roughly five years earlier than the previous one. This change follows recent studies suggesting that the cost and resources necessary to build a cryptographically relevant quantum computer are markedly lower than previously assumed. As a result, many companies have already advanced their schedules to shift away from susceptible systems by 2029.
Advanced quantum computers pose a significant risk to existing cryptographic security systems, especially if they fall into the wrong hands. There is also a growing concern that enemies might gather U.S. information now and decrypt it later once large-scale quantum computers become operational.
Prior to these changes, the National Security Agency had set a timeline for "National Security Systems," which includes only defense and intelligence systems under its authority, to be quantum-ready between 2030 and 2033. Most other organizations were given until 2035 to make the transition. Now, many of them will need to make this change much sooner.
Earlier Transition Timelines
According to Brian LaMacchia, a cryptography engineer, systems classified as high-value assets and high-impact systems will now need to transition 4-5 years earlier, moving from a 2035 deadline to a 2030/2031 deadline. This substantial cut in the transition timeline follows similar timeline revisions that were announced earlier this year.
Earlier this year, researchers found a way to crack ECC-256, a security measure used for certain blockchains, in just ten days using 30,000 physical qubits. In the same month, a research team developed two quantum circuits that could solve a mathematical problem using approximately 500,000 physical qubits. This is half of what was estimated only a year ago as necessary to break a more complex encryption.
Progress in this field has been steady and swift. As a result, those with the most to lose are preparing for the arrival of a quantum computer with cryptographic relevance, or Q Day, sooner rather than later.
Replacing Vulnerable Algorithms
Two of the most common public key cryptography algorithms are based on factoring composites and the discrete logarithm. While these mathematical problems are straightforward to solve in one direction, they are nearly impossible in the other. A quantum computer with enough resources can solve these problems in cubic time using Shor's algorithm, which is significantly faster than the exponential time required by today's classical computers.
The replacement algorithms for these encryption methods are based on problems for which quantum computers currently have no advantage over classical computers. However, replacing quantum vulnerable algorithms with Post-Quantum Cryptography (PQC) ones is not a straightforward task. For example, public key sizes for one of the replacements are roughly three times larger. Given the complexity and scale of the work ahead, it's clear why the government is taking this transition very seriously.
Supporting Quantum Computing
In addition to the new encryption measures, the government has released another directive that encourages the support of quantum computing. In collaboration with the private sector, the government will focus on developing the world's first quantum computer powerful enough to usher in a new era of quantum-enabled scientific discovery.
The government has expedited the timeline for the implementation of quantum-resistant encryption systems. This move is intended to shield key information belonging to militaries, financial institutions, governments, and common people from potential threats posed by quantum computers.
The recent directive, known as "Safeguarding the Nation from Advanced Cryptographic Attacks," mandates that critical computing systems transition to post-quantum cryptographic key set-ups by the end of 2030. Quantum-safe digital signature schemes should also be adopted by the end of 2031.
Addressing a Growing Threat
For many entities, this new deadline arrives roughly five years earlier than the previous one. This change follows recent studies suggesting that the cost and resources necessary to build a cryptographically relevant quantum computer are markedly lower than previously assumed. As a result, many companies have already advanced their schedules to shift away from susceptible systems by 2029.
Advanced quantum computers pose a significant risk to existing cryptographic security systems, especially if they fall into the wrong hands. There is also a growing concern that enemies might gather U.S. information now and decrypt it later once large-scale quantum computers become operational.
Prior to these changes, the National Security Agency had set a timeline for "National Security Systems," which includes only defense and intelligence systems under its authority, to be quantum-ready between 2030 and 2033. Most other organizations were given until 2035 to make the transition. Now, many of them will need to make this change much sooner.
Earlier Transition Timelines
According to Brian LaMacchia, a cryptography engineer, systems classified as high-value assets and high-impact systems will now need to transition 4-5 years earlier, moving from a 2035 deadline to a 2030/2031 deadline. This substantial cut in the transition timeline follows similar timeline revisions that were announced earlier this year.
Earlier this year, researchers found a way to crack ECC-256, a security measure used for certain blockchains, in just ten days using 30,000 physical qubits. In the same month, a research team developed two quantum circuits that could solve a mathematical problem using approximately 500,000 physical qubits. This is half of what was estimated only a year ago as necessary to break a more complex encryption.
Progress in this field has been steady and swift. As a result, those with the most to lose are preparing for the arrival of a quantum computer with cryptographic relevance, or Q Day, sooner rather than later.
Replacing Vulnerable Algorithms
Two of the most common public key cryptography algorithms are based on factoring composites and the discrete logarithm. While these mathematical problems are straightforward to solve in one direction, they are nearly impossible in the other. A quantum computer with enough resources can solve these problems in cubic time using Shor's algorithm, which is significantly faster than the exponential time required by today's classical computers.
The replacement algorithms for these encryption methods are based on problems for which quantum computers currently have no advantage over classical computers. However, replacing quantum vulnerable algorithms with Post-Quantum Cryptography (PQC) ones is not a straightforward task. For example, public key sizes for one of the replacements are roughly three times larger. Given the complexity and scale of the work ahead, it's clear why the government is taking this transition very seriously.
Supporting Quantum Computing
In addition to the new encryption measures, the government has released another directive that encourages the support of quantum computing. In collaboration with the private sector, the government will focus on developing the world's first quantum computer powerful enough to usher in a new era of quantum-enabled scientific discovery.