By IT Brew Staff
less than 3 min read
Definition:
Post-quantum security will involve protecting data, systems, and communications against attacks from quantum computers that can break standard encryption. While conventional computers would need years to crack encryption based on current methods such as the Advanced Encryption Standard (AES), which relies on up to 256-bit encryption keys, quantum computing could do it in hours or even minutes, at least in theory.
Quantum computers rely on qubits. Unlike “standard” bits (i.e., 0 or 1), qubits can exist as a 0, 1, or an in-between state, a “superposition” that allows them to crunch through complex problems much faster. To prevent a quantum-computing setup from breaking through even the hardest encryption, tech companies must design new, quantum-resistant algorithms that rely on different math from previous encryption platforms.
The National Institute of Standards and Technology (NIST), which is pushing the effort to create post-quantum cryptography standards, has selected four algorithms for future protection against quantum decryption: three are based on math problems known as structured lattices, and a fourth leverages hash functions. If NIST can develop technical standards around these algorithms, it could give companies the time and ability to harden their data against attack before quantum computing goes mainstream.
For IT pros, preparing for the post-quantum environment means evaluating potential attack surfaces and considering modular cryptographic libraries that can be swapped out for new, more effective algorithms, among other techniques. Legacy systems may not support post-quantum protection, which could mean some hard choices about whether and how to update an organization’s tech stack.
