Quantum computers are expected to become powerful enough to break public-key cryptography. The National Institute of Standards and Technology (NIST) advocates the replacement of quantum-vulnerable algorithms by 2035, while on the contrary, Google estimates that it can be as early as 2029.

Large-scale technology transformations normally take three to five years to occur, and sometimes, they can take even longer depending on the environment. Organizations are expected to move to the new core standards for their systems in the long run, meaning they need to adopt a more flexible approach and become crypto agile.

What is Crypto Agility?

Crypto Agility is the ability to migrate swiftly from one algorithm to another. It is a form of defense because no one knows what to expect when we deal with a post-quantum universe. We are expected to put compensating controls in place for our systems, controls that do not need to be upgraded or replaced as frequently as current software.

However, that means we need to be prepared to migrate to future iterations of cryptography standards. Software developers and technology vendors will need to change the way they develop applications.

Why is Quantum Readiness Important?

Some organizations will need to consider significant infrastructure upgrades. Most notably, they need new quantum resilient algorithms that include increased memory and CPU resources. Current infrastructure and systems may need replacing.

In addition, there is a risk that the new standards could be liable. Last July, Anthropic revealed the Claude Mythos Preview model they were developing was capable of attacking and weakening the HAWK post-quantum digital signature standard. If a post-quantum algorithm is vulnerable, then organizations need the ability to quickly transition to an alternative and minimize the damage from a data breach.

This is especially critical due to the rise in AI. AI promises to make our jobs easier and efficiently run things for us without human interference. Unfortunately, hackers who decrypt data could also use AI.

The Long Run Approach

Even in a post-quantum world, there will constantly be challenges in the technology industry that we will have to overcome. Organizations that operate in heavily regulated industries or support critical infrastructure should understand that they need to take action quickly.

Some organizations have already assessed their exposure, build better migration plans, and evaluated how they can defend against “Harvest Now, Decrypt Later” (HNDL) attacks.

HNDL attacks are cyberattacks where threat actors collect valuable data that is “persistent-valued”, expecting that future quantum capabilities enable them to decrypt the data for future attacks.

However, the challenge remains that no one has complete visibility into where cryptography is used, or how it is embedded in the world of technology. Encryption is woven through applications, operating systems, databases, networks, connected devices, identity systems, and business workflows.

The sooner security teams can start unraveling the ball, the better. Organizations should be demanding their suppliers and vendors to also be post-quantum compliant. By laying early groundwork, we can pay real dividends, prepare for the lack of visibility, and effectively plan. Identifying cryptography is important, especially for critical applications, networks, cloud services, certificates, VPNs, PKI, and third-party products.

If we wrong it repeatedly, then we likely face multiple migrations under immense pressure. Therefore, quantum readiness is not a one and done exercise. It is something we need to be constantly adapting as the world of technology advances.

For more information, you can read the full article from Cybersecurity Insiders

Link: https://www.cybersecurity-insiders.com/why-quantum-readiness-is-not-a-one-and-done-exercise/

About Advanced Network Consulting

Advanced Network Consulting is a Southern California based IT consulting company focused on the small business market. For businesses in Southern California, or a business that has an office in LA or Orange County, Advanced Network Consulting offers on-site and remote network and server support.

Hoping to improve the efficiency of your computer? Need to strengthen the cybersecurity of your device? We offer a complimentary one-hour onsite evaluation, and our network and server solutions will ensure that your business continues to be operational.

Contact us through our site: https://www.ancsite.com/ #ANC #AdvancedNetworkConsulting #IT #ITconsultant #OCsmallbusiness #computing #technology #CybersecurityInsiders #quantumreadiness #cybersecurity #networksecurity #systemsecurity #applications #vulnerability #cloudsercurity #computers #computersecurity #quantumcomputers