Preparing for the Quantum Computing Challenge: A Gradual Shift to Crypto Agility

As the pace of quantum technology accelerates, leaders in the banking sector emphasize the need for a careful approach to post-quantum cryptography (PQC). Chief Information Security Officers (CISOs) are encouraged to start preparations early to adapt effectively. Although quantum computers are still hampered by high error rates, their rapid development suggests potential risks to current encryption standards like RSA and Diffie-Hellman. This is particularly worrying for industries handling sensitive data—think finance and healthcare—where adversaries may be stockpiling encrypted data to decrypt it when quantum advances allow, a method known as “harvest now, decrypt later.”

Gradual Transition to Post-Quantum Cryptography

In anticipation of these threats, transitioning to PQC is vital. The U.S. National Institute of Standards and Technology (NIST) has released the first three PQC standards, paving the way for a phased migration expected to conclude by 2035. Financial sectors, led by voices like Sudha E. Iyer at Citi, already see the value in beginning this shift now. NIST’s standards have eased implementation, helping organizations like Citi advance smoothly in their PQC migration.

Technical Hurdles in Protocol Implementation

However, challenges remain. Michael Smith from DigiCert notes the difficulty of developing a fully PQC-compliant TLS protocol. As David Chapman from PenFed Credit Union points out, creating a cryptographic bill of materials (CBOM) to prioritize system upgrades is crucial. Michael advises a proactive approach: assess and upgrade systems with quantum-resistant algorithms to minimize operational risks.

The Path to Crypto Agility

Industry leaders like Daniel Cuthbert from Santander stress the need for vendors to clarify their products’ cryptographic capabilities. Dr. Ali El Kaafarani, a leading voice in NIST’s standards, urges enterprises to challenge vendors on their PQC readiness. This ensures not only compliance but also a competitive edge. With stringent EU deadlines, organizations are pressed to adopt PQC measures despite budget concerns, driving industry-wide engagement with this next-gen technology.

Stay ahead in the rapidly evolving tech landscape. Subscribe to Qsentinel for the latest insights and updates.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.