Cracking Encryption: The Quantum Threat

GovLoop’s interview with Michael Redding, Chief Technology Officer, QuantropiOttawa, Ontario, June 21, 2024 – There’s no doubt that quantum computing offers great promise: Mathematical problems that are impossible today will be trivial tomorrow, allowing for drug discoveries and other breakthroughs. But just as radiation can be used both for good — to treat cancer, for example— and bad, quantum computing poses risk, said Michael Redding, Quantropi CTO.“We can start to guess at all the potential ways a powerful [quantum] computer can be misused,” he said, “but one that is clear and … very specific is the fact that it will break current encryption.” The initial industry consensus was that quantum would realistically threaten encryption in 10 to 20 years, but artificial intelligence (AI) has dramatically shortened that window to three to five years, he said.That’s because AI is great at extracting patterns in massive datasets. Research shows, said Redding, that we can use AI as a data pre-processor to “chew on the ciphertext” and vastly reduce how much data a quantum computer must analyze. That means the quantum computer can be smaller than anticipated because it’s working with less information. Without AI, you might need 8 million qubits to break a single encryption; using AI, you might need less than 400, he said.The first problem when trying to quantum-proof your encryption is locating it — because encryption, Redding said, is “literally sprinkled throughout every system.” It’s like trying to identify all the rubber in your car and decide whether to replace the parts or retrofit them, and whether you or a third party will perform the work. Although federal standards for quantum-safe encryption are still pending, agencies can take steps today to be quantum-ready, Redding said. They should inventory their network systems, establish security priorities and work with vendors on a quantum-security transition plan. Agencies also can make the random numbers their encryption relies on — that comprise the digital keys that encryption algorithms use — even more unpredictable, he said.And third, organizations need only minutes, he stressed, to quantum-harden the IPsec VPN channels that are the backbone of secure communication, connecting one data center to another, for instance. In other words, even if “all the [agency] applications themselves are [not secure],” he said, “as they go over the wire … they’re protected.”There are three elements — what Redding collectively calls “TrUE” — to a complete cryptographic system. First, you must Trust that you’re engaging in a secure discussion; the technology underlying that is asymmetric encryption, he said.Then you need Uncertainty, based on symmetric encryption, so hackers don’t know if they’ve accessed data in motion or at rest. And you need Entropy, which means having truly unguessable, incalculable random numbers, he explained.Quantropi offers a platform, QiSpace™, that delivers quantum security by providing all three “TrUE” quantum solution components — as an “upgrade [or] addition to what you have,” Redding said, “vs. a rip-and-replace.” One thing is certain, he said: “The next few years will be unprecedented.”Want to try QiSpace™? Submit your trial request today!GovLoop’s mission is to inspire public-sector professionals by serving as the knowledge network for government. GovLoop connects more than 300,000 members, fostering cross-government collaboration, solving common problems and advancing government careers. GovLoop is headquartered in Washington, D.C., with a team of dedicated professionals who share a commitment to the public sector. GovLoop has curated a guide to provide clear and concise insights into the complex world of quantum computing, featuring expert opinions from government and industry leaders.Download the guide hereQuantum-secure any application, product, network, or device with the QiSpace™ platform — without having to sacrifice performance or make major investments in new technology or infrastructure. See for yourself how only QiSpace™ offers TrUE quantum security via all three essential cryptographic functions. Leverage asymmetric encryption algorithms (the “Trust” or “Tr” of “TrUE”) via MASQ™, symmetric encryption (“U” for “Uncertainty”) via QEEP™ and strong random numbers (“E” for “Entropy”) via SEQUR™. Make it TrUE with QiSpace™ — and protect your business, brand, and customer promise. Now and forever. To learn more about our quantum-secure solutions, don’t hesitate to get in touch with our experts!