MediaNama\u2019s Take: Future-proofing technology to prevent data leaks and cyber-attacks is critical for any organisation handling sensitive or personal data. As Ministry of Electronics and Information Technology\u2019s (MeitY) Computer Emergency Response Team (CERT-In) has called for the development of a safeguarding system around today\u2019s strongest encryption, companies, institutions, and government agencies must start rethinking their approach to future technologies like quantum computing, which may soon become a reality and potentially threaten sensitive data.<\/p>\n
What\u2019s the News: \u2018Quantum risk is not a technical issue, but a strategic business threat,\u2019 reads the white paper Transitioning to Quantum Cyber Readiness<\/a>, published by the MietY\u2019s CERT-In in collaboration with SISA, a forensic intelligence company.<\/p>\n The paper highlights the ability of quantum computers to break existing encryption systems, which could potentially put current data at risk from cyber attackers. Cryptographic protocols like Rivest\u2013Shamir\u2013Adleman (RSA)<\/a>, Transport Layer Security (TLS), and its predecessor Secure Sockets Layer (SSL)<\/a>, which widely secure communications<\/a> on the internet such as web browsing, encrypted messaging, financial transactions, e-commerce, emails, Virtual Private Networks (VPNs), Application Programming Interfaces (APIs), and cloud storage services, will face significant threats once quantum computing becomes a reality, the report says.<\/p>\n Therefore, it suggests safeguarding existing data, including encrypted data, from hackers who might store it today with the intention of decrypting it in the future when quantum computers become available.<\/p>\n CERT\u2011In urges businesses to develop strategic technological solutions to mitigate risks posed by quantum computing in the near future. These organisations estimate that cryptographically relevant quantum computers (CRQCs) could be available within the next three to five years.<\/p>\n Why Quantum Computers Matters:\u00a0<\/p>\n Google has said it aims<\/a> to launch commercial quantum computing applications by 2030, the same year CERT-In expects quantum computing to arrive. Recent innovations in quantum computing and the AI-driven pace of technological advancement make 2030 seem increasingly realistic, as the principles of quantum mechanics evolve from theory to practicality.<\/p>\n For instance, in December 2024, Google announced<\/a> that its new quantum chip, Willow<\/a>, exponentially reduced errors as it added more qubits \u2014 the quantum equivalent of binary bits. Google Quantum Lab claims that Willow completed a benchmark test using random circuit sampling (RCS) in under five minutes. Google claims even today\u2019s fastest supercomputers, like Frontier, would take approximately 10 septillion years (10\u00b2\u2075) to complete the same test.<\/p>\n Reducing errors is essential in quantum computing because quantum systems are inherently more prone to errors<\/a> than classical computers. The fragile nature of qubits causes them to be easily disrupted by changes in temperature and environmental noise, including electromagnetic signals from mobile phones and the Earth\u2019s magnetic field.<\/p>\n Similarly, in February 2025, Microsoft announced<\/a> the world\u2019s first quantum processor, Majorana 1, powered by a Topological Core architecture using a new material called a \u201ctopoconductor.\u201d While the chip currently contains eight qubits, Microsoft claims it is designed to scale to one million qubits on a single chip\u2014allowing it to solve complex industrial and scientific problems beyond the capabilities of today\u2019s computers.<\/p>\n IBM, too, has set a target of 2029 to build<\/a> a \u201cfault-tolerant quantum computer,\u201d and Nokia is working<\/a> to build quantum-safe networks. Even though the exact arrival of quantum computers is uncertain, the potential cyberthreats they pose can no longer be dismissed as merely \u201chypothetical<\/a>.\u201d Technological advancement must be matched with technological vigilance.<\/p>\n Which data is considered as high risk?<\/p>\n CERT-In suggests that organisations classify their data based on sensitivity and the confidentiality period required. Critical Risk data includes highly sensitive information that must remain confidential for at least 10 years.<\/p>\n High-Risk data includes financial records, healthcare data, government secrets, intellectual property, and legal documents. These require robust and ongoing protection.<\/p>\n Medium-Risk data covers information such as corporate communications, customer databases, and research data, which typically require shorter confidentiality periods compared to financial and health records.<\/p>\n Advertisements<\/p>\n Using Mosca\u2019s Theorem, the paper warns that if an organisation\u2019s data-retention period and the time needed to develop a safe framework exceed the expected arrival of CRQCs, the organisation faces an immediate and urgent risk.<\/p>\n \u2018Harvest Now, Decrypt Later\u2019 Attacks<\/p>\n The paper also warns against \u201cHarvest Now, Decrypt Later\u201d (HNDL) attacks, where hackers collect encrypted data today intending to decrypt it in the future using quantum computers. It suggests that any data requiring protection beyond 2030 should be considered at immediate risk.<\/p>\n In response to such threats, in January 2025, the Biden administration in the U.S. issued<\/a> an executive order<\/a> directing the federal government to transition to cryptographic algorithms resistant to CRQCs. Within 180 days, the order required the Cybersecurity and Infrastructure Security Agency (CISA<\/a>) to publish a list of product categories with widely available PQC (Post-Quantum Cryptography)-capable solutions. Agencies must then, within 90 days, make PQC support mandatory in new solicitations for those products.<\/p>\n Companies like Apple have already taken steps<\/a> to implement quantum-resistant protocols that do not compromise encryption.<\/p>\n What Does the Whitepaper Suggest?<\/p>\n CERT-In recommends a comprehensive technical audit of all digital infrastructure to identify where and how encryption is deployed. This includes encryption algorithms, certificates, keys, protocols, and cryptographic libraries and modules.<\/p>\n The white paper advises reviewing servers, endpoints, mobile devices, Internet of Things (IoT) systems, and Supervisory Control and Data Acquisition (SCADA<\/a>) components for embedded encryption mechanisms and secure hardware modules such as Hardware Security Modules (HSMs<\/a>).<\/p>\n It also calls for scrutiny of the algorithmic strength and cipher suite settings of key communication protocols\u2014including TLS, SSH, IPsec, and blockchain consensus algorithms, for their algorithmic strength, cipher suite settings,<\/a> and certificate handling.<\/p>\n The paper recommends prioritising high-risk, internet-facing systems like RSA, Elliptic Curve Digital Signature Algorithm (ECDSA), and Elliptic Curve Diffie\u2013Hellman (ECDH), which are widely used<\/a> in e-healthcare, e-banking, e-commerce, and e-governance. For instance, the banking sector uses<\/a> RSA to generate digital signatures.<\/p>\n Also Read:\u00a0<\/p>\n Support our journalism:\n<\/p>\n For You<\/p>\n","protected":false},"excerpt":{"rendered":"MediaNama\u2019s Take: Future-proofing technology to prevent data leaks and cyber-attacks is critical for any organisation handling sensitive or…\n","protected":false},"author":2,"featured_media":21261,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[4323,13622,13623,4342,13624,86,56,54,55],"class_list":["post-21260","post","type-post","status-publish","format-standard","has-post-thumbnail","category-computing","tag-computing","tag-cybersecurity-and-data-breaches","tag-data-encryption","tag-quantum-computing","tag-quantum-cyberthreats","tag-technology","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/21260","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=21260"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/21260\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/21261"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=21260"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=21260"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=21260"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}