first guide<\/a> on August 14 for transitioning to post-quantum cryptography (PQC).\u00a0<\/p>\nThe goal of the white paper? Helping \u201centerprises tackle the challenges of PQC transitions,\u201d through a \u201ccoordinated, public effort to provide clear guidance and accelerate preparedness for the quantum era,\u201d the coalition said.\u00a0\u00a0<\/p>\n
\u201cViable quantum computing could arrive in less than five years, which means time is a precious commodity for security practitioners,\u201d said the alliance.\u00a0\u00a0<\/p>\n
\u201cWhen quantum computers achieve the ultimate cryptographic breakthrough, the resulting vulnerabilities could trigger unprecedented data theft risks and economic consequences, potentially leading to the largest transfer of wealth in recorded history,\u201d it said.\u00a0\u00a0<\/p>\n
To prevent those consequences, the alliance said organizations need to achieve cryptographic agility \u2013 or the ability to quickly adapt cryptographic standards to the latest threats without waiting for years to defend against immediate threats. \u00a0<\/p>\n
\u201cIt is both a measure of preparedness and a design principle for updating, replacing, and adapting cryptographic systems with minimal disruption to operations and architecture,\u201d the alliance said, adding that agility \u201crepresents the next evolution of secure encryption.\u201d\u00a0<\/p>\n
Getting there will require applying a comprehensive framework similar to that of zero trust security, alliance members wrote, which means covering every element of cryptographic implementation.\u00a0\u00a0<\/p>\n
Discovering and prioritizing the scope of a quantum threat and evaluating an organization\u2019s assets is the initial step those looking to make the transition to PQC should take. From there, using incremental implementation can avoid disrupting ongoing operations through testing and staging, iterative deployment, and continuous monitoring and improvement, the group said.\u00a0\u00a0<\/p>\n
Taking those steps can begin action that is critical now, rather than later, the alliance said, explaining that adversaries who harvest encrypted data now and then decrypt it later can exploit current weaknesses and use that information later when quantum computing is viable.\u00a0<\/p>\n
\u201cDelaying action only increases exposure to these risks,\u201d warned the alliance, adding \u201cthe shift to quantum-resilient cryptography is unavoidable,\u201d and acting now \u201cis critical to risk mitigation and maintaining compliance as regulations evolve in kind.\u201d\u00a0<\/p>\n
While certain sectors \u2013 such as finance, defense, telecommunications and the Federal government \u2013 are ahead in PQC adoption, local governments are lagging behind, which poses the \u201cchallenge of catching up to avoid vulnerabilities, the group said.\u00a0\u00a0<\/p>\n
There are technical challenges in transitioning to PQC too, the alliance noted, saying that legacy systems, Internet of things devices, and outdated software \u201coften struggle to support the computational demands of PQC.\u201d\u00a0<\/p>\n
Applying best practices \u2013 such as starting now, centralizing planning, building expertise, and planning iterative implementation \u2013 can help address some of those challenges.\u00a0<\/p>\n
Vendor accountability is another way to address challenges, with the alliance saying that an \u201corganization\u2019s procurement power is a key tool for demanding quantum readiness from vendors, accelerating industry-wide adoption.\u201d\u00a0<\/p>\n
\u201cThis collaborative approach is key \u2013 organizations do not need to navigate the complexities of transitioning to post-quantum cryptography alone,\u201d said the alliance. \u201cLet the journey to quantum safety begin.\u201d\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"A new coalition of private sector quantum computing leaders has unveiled its first roadmap to \u2018cryptographic agility\u2019 with…\n","protected":false},"author":2,"featured_media":85923,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[46],"tags":[191,74],"class_list":{"0":"post-85922","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-computing","8":"tag-computing","9":"tag-technology"},"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/85922","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/comments?post=85922"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/85922\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media\/85923"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media?parent=85922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/categories?post=85922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/tags?post=85922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}