The Quantum Threat

Despite large scale quantum computing being several years away from being a practical reality, federal government experts are deservedly concerned about the cybersecurity implications today. Federal agencies need to start their quantum safe transition strategy now.

This was underscored in May 2022, when the National Security Memorandum on Promoting United States Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems (NSM 10) provided requirements and timelines for Quantum-Resistant Cryptography. In particular, the memo notes that “America must start the lengthy process of updating our IT infrastructure today to protect against this quantum computing threat tomorrow.”

The memo continues by underscoring that, “Central to this migration effort will be an emphasis on cryptographic agility, both to reduce the time required to transition and to allow for seamless updates for future cryptographic standards.”

Today’s non-PQ (post-quantum) encryption absolutely will break (or be broken) in the future, affecting security aspects such as authentication, code-signing, and digital signatures.

Understanding Post-Quantum Cryptography (PQC)

Post-Quantum Readiness Starts with Crypto-Agility

Crypto-agility is a strategy that enables you to future-proof your organization by:

• Having the flexibility to quickly change protocols, keys, and algorithms
• Using flexible, upgradeable technology
• Reacting quickly to cryptographic threats, such as Quantum computing
• Adding to your tech stack with minimal to no disruption

Thales TCT’s products have been purposely designed to help you be crypto-agile and quantum-safe.

Strategy for Migration to Post-Quantum Crypto

Inventory cryptographic technologies and prioritize high-risk systems. Although the  May 4, 2023 deadline for agencies to submit a list of their prioritized crypto inventory has passed, it’s critical for agencies continue this process to ensure that newly deployed systems are on track to be quantum safe.

Automate crypto discovery.  Since the crypto inventory process is continuous, automating crypto discovery (versus using a manual process) is the most effective way of keeping track of new or updated crypto systems. There are many solutions available for the automation of crypto discovery and inventory. With automated tools, agencies will have accurate inventory of their crypto .

Set up a PQC test environment. Many encryption vendors  have already implemented pre-PQC standard algorithms in their solutions. With NIST’s release of the PQC standards in August 2024, there should no longer be a delay in upgrading your agency’s environment. The PQC algorithms’ impact needs to be tested—the standardized algorithms will generate larger keys, and the size of those larger keys could affect overall performance.

Practice crypto agility. Crypto-agile solutions support both classic algorithms and PQC algorithms. When deploying crypto today, agencies should ensure that their solutions are crypto-agile to prepare for the future.

Apply quantum key generation  The quality of the cryptographic keys used to encrypt and decrypt data is the foundation of encryption. If these keys are compromised, data is at risk. Agencies should leverage a quantum random number generator to generate quantum-enhanced keys. QRNGs produce high quality entropy which is the basis for all random numbers and cryptographic keys.

Implement quantum resistant algorithms. Agencies need to ensure that their encryption solutions are using the standardized PQC algorithms—or are crypto-agile and have an upgrade path to utilize PCQ algorithms in the near future.

Thales TCT Quantum-Ready Solutions

Thales TCT  has integrated PQC into its high-assurance cryptographic solutions and incorporate crypto-agile frameworks to adapt to evolving PQC requirements. By aligning with NIST-standardized PQC algorithms, leveraging crypto-agility, and collaborating with NIST  and NSA, through a Cooperative Research and Development Agreement (CRADA), Thales TCT ensures quantum-resistant security for U.S. Government intelligence, defense, and civilian agencies.

Luna T-Series HSMs are the choice for government agencies when storing, protecting and managing cryptographic keys used to secure sensitive data and critical applications. Meeting government mandates for U.S. Supply Chain, the high-assurance, crypto-agile, tamper-resistant Luna T-Series HSMs are designed, developed, manufactured, sold, and supported in the United States.

Protect Encryption Keys with T-Series Luna Hardware Security Modules

Secure Data in Transit with High Speed Encryptors (HSE)

Thales HSE network encryption solutions support Post-Quantum Cryptography with a crypto-agile, FPGA-based architecture.

Featured Resources

Resources