Undisclosed 鈥渓egal issues鈥� are preventing the US from announcing which cryptographic algorithms should be used as standard to protect data from future quantum computers. Meanwhile, security experts at Google warn that data being sent today is already at risk and that firms need to prepare themselves to adopt the new algorithms as soon they are announced.
Cryptography renders information unreadable by anyone without the correct decryption key, and modern security algorithms are based on mathematical problems deemed too hard to be cracked by even the fastest computers available today. But once a practical quantum computer is created, these algorithms will not just become easier to crack, but trivial. In theory, such a machine would immediately render emails, bank accounts and cryptocurrencies vulnerable to attack.
Because of this, since 2017, the US National Institute of Standards and Technology (NIST) has been testing 82 鈥減ost-quantum鈥� algorithms believed to be resistant to the increased code-breaking ability of quantum computers, and whittling them down to the best few. In March this year, the group said that the final handful of winners would be announced later that month, but this deadline has since passed.
Advertisement
at NIST told 快猫短视频 that the announcement is 鈥渘o more than a few weeks鈥� away and that legal issues 鈥� which he couldn鈥檛 disclose details of 鈥� were behind the delay, although he confirmed that a decision has been made behind the scenes.
But critics say a speedy announcement is vital so that companies can begin protecting themselves, and us. Researchers from Google and its spin-off company SandboxAQ, which has attracted , say that data is already at risk of so-called 鈥渟tore-now, decrypt-later鈥� (SNDL) attacks, where information transmitted now is stored until a future quantum computer can be used to decrypt it. In an聽 they add that computers, cars and large infrastructure projects are all being built today with outdated cryptography.
Google says companies need to act now, because sensitive information being sent today such as trade secrets, medical records and national security documents would still cause problems if revealed a decade from now by quantum hackers. 鈥淔or those organisations that have not started integrating PQC [post-quantum cryptography] in their systems or even planning for it, we highly recommend starting their efforts now,鈥� says the article. 鈥淭he SNDL attack is already practicable, so in this context, such organisations are already late and at increasing risk.鈥� The authors declined to be interviewed before publication.
Responding to the article, Moody says that companies should wait for an official decision before acting. 鈥淭he risk of taking an algorithm that isn鈥檛 our final standardised version is you could end up with the wrong one, and then you end up with a product that isn鈥檛 interoperable with what everybody else will be [using],鈥� he says. 鈥淎nd if you鈥檙e taking an algorithm that wasn鈥檛 on our shortlist, there could be security vulnerabilities.鈥� One of the shortlisted algorithms was found to be relatively easy to circumvent with even basic hardware in March.
Moody says that although there have been large-scale cryptography upgrades in the past, there has perhaps never been one as urgent as post-quantum cryptography. 鈥淧art of that is because we don鈥檛 ever know when a quantum computer will be out there,鈥� he says. 鈥淪omeone could make a breakthrough next week. But then there鈥檚 also just the threat that you can be at risk even before a quantum computer comes along because someone could just hold on to your encrypted data and wait for a quantum computer. So the sooner you can transition, the better.鈥�
Moody declined to elaborate on the nature of the legal issues, or which parties were involved in the delay, but says only that 鈥渢here鈥檚 some lawyers involved and they鈥檙e taking a little bit longer to approve it than I would have predicted鈥�.
Nature
