Quantum-safe thinking, Pg8

Key Highlights:

• The DST Task Force report addresses the long-term yet urgent threat to India's digital ecosystems from quantum computing.
• Public-key cryptography, crucial for online security, is vulnerable to quantum computers using algorithms like Shor's algorithm.
• The report recommends adopting three post-quantum cryptography (PQC) standards finalized in 2024 and migrating to this architecture.
• Critical infrastructure sectors like finance, power grids, and defense should prioritize this migration.
• The report suggests wider adoption of PQC and quantum key distribution (QKD) for high-security environments.
• Implementing these recommendations requires a budgetary allocation of at least ₹5,000 crore.

Detailed Insights:

• Public-key cryptography relies on mathematical problems that are hard for conventional computers but solvable by quantum computers.
• Symmetric cryptography is less vulnerable, but the main risk lies in the public-key infrastructure securing HTTPS and telecommunication networks.
• The immediate concern is that malicious actors might harvest encrypted data now and decrypt it later using quantum computers.
• Post-quantum cryptography (PQC) can run on existing computers and resist attacks from quantum computers.
• The report advises continuous migration to PQC, even if the anticipated "Q-day" is delayed, due to the complexity of cryptographic dependencies.
• Advanced AI can compromise software, and quantum computers threaten encryption mathematics, expanding the threat landscape.
• Implementing QKD involves trade-offs between security and operational efficiency, requiring careful consideration.
• Upgrading infrastructure, reducing vendor dependence, and developing human capital are crucial for India's quantum-safe transition.

QKD.png

Key Concepts Involved:

• Public-key cryptography: An encryption method using a pair of keys, one public for encryption and one private for decryption.
• Post-quantum cryptography (PQC): Cryptographic systems designed to be secure against attacks by quantum computers.
• Quantum key distribution (QKD): A secure communication method using quantum mechanics to distribute encryption keys.