Quantum-enhanced to quantum-safe: Banks prepare for the next big threat, Pg15

Key Highlights:

• The banking sector is intensifying its focus on cybersecurity due to emerging threats from artificial intelligence (AI) and the future risk posed by quantum computing.
• The Reserve Bank of India (RBI) issued a new cybersecurity and technology-resilience framework for commercial banks in July 2026.
• The Securities and Exchange Board of India (SEBI) introduced an IT Resilience Index (ITRI) for market infrastructure institutions in August 2026.
• Quantum computing could undermine current cryptographic systems, with predictions suggesting decryption capabilities by 2029-2030.
• The "Harvest Now, Decrypt Later" (HNDL) threat, where encrypted data is stored now for future quantum decryption, is already active.
• Transition to Post-Quantum Cryptography (PQC) and developing crypto-agility are crucial for financial institutions.

Detailed Insights:

• The RBI framework sets requirements for IT governance, cyber-risk management, and incident response for commercial banks.
• The SEBI IT Resilience Index measures the robustness of critical IT systems and identifies weaknesses early in market infrastructure institutions.
• Traditional computers use bits (0 or 1), while quantum computers use qubits, which can exist in a superposition of both 0 and 1.
• Quantum algorithms manipulate these quantum states, offering a significant computational advantage for certain problems.
• Modern cryptography relies on mathematical problems that are currently difficult for conventional computers to solve.
• The quantum threat could compromise functions like authentication, secure communication, key exchange, and digital signatures.
• Technology companies and governments are actively working on transitioning systems to be quantum-safe.
• The Digital Threat Report 2025-26 by CERT-In, CSIRT-Fin, and SISA indicates that HNDL strategies are already in use.
• HNDL makes data requiring long-term confidentiality particularly vulnerable, as attackers can store it now for future decryption.
• Post-Quantum Cryptography involves encryption algorithms designed to resist attacks from quantum computers.
• Crypto-agility is essential for banks to replace cryptographic algorithms and protocols as security needs evolve, given their complex infrastructure.

Scientific/Technical Concepts Involved:

• Quantum Computing: A field utilizing quantum mechanics (superposition, entanglement) to solve complex problems faster than classical computers.
• Qubit: The basic unit of information in quantum computing, capable of existing in multiple states simultaneously (0, 1, or both).
• Post-Quantum Cryptography (PQC): Cryptographic algorithms designed to be secure against attacks from powerful quantum computers.
• Harvest Now, Decrypt Later (HNDL): A cyberattack strategy where encrypted data is collected today to be decrypted later when quantum computers become capable.