sb-as logo
Story image

Quantum computing will pose risks to enterprise encryption

24 Oct 2019

The internet of things is becoming a backbone for technology worldwide, and quantum computing is developing right alongside it. While quantum computing can bring the potential for development, there are also plenty of risks.

According to a DigiCert survey of 400 enterprise organisations across Japan, Germany and the United States, 55% believe that quantum computing and post Quantum Crypto  is a ‘somewhat to extremely large’ security threat at the present time, with 71% it will only become more of a threat in the future.

Organisations believe that IT teams should be aware of quantum computing. According to the survey, 83% of respondents believe that IT must learn about quantum-safe security practices.

However, quantum computing presents significant security challenges.

These include: High costs to battle and mitigate quantum threats; Data stolen today is safe if encrypted, but quantum attacks will make this data vulnerable in the future; and encryption on devices and applications embedded in products will be susceptible.

Additionally, cost; lack of staff knowledge; and a concern that TLS vendors won’t have upgraded certificates in time were all cited as concerns.

To deal with those challenges, 95% of surveyed respondents say they are discussing at least one tactic to prepare for quantum computing.

As organisations prepare for quantum computing, 56% of respondents are establishing a PQC budget. Respondents are also beginning to understanding their current level of risk, building knowledge about PQC and developing TLS best practices.

“It is encouraging to see that so many companies understand the risk and challenges that quantum computing poses to enterprise encryption,” says DigiCert industry and standards technical strategist, Tim Hollebeek.

“With the excitement and potential of quantum technologies to impact our world, it's clear that security professionals are at least somewhat aware of the threats that quantum computers pose to encryption and security in the future. With so many engaged, but lacking good information about what to do and how to prepare, now is the time for companies to invest in strategies and solutions that will help them get ahead of the game and not get caught with their data exposed when the threats emerge."

The survey suggests three best practices for companies ready to start planning their strategies for securing their organizations for the quantum future:

1. Know your risk and establish a quantum crypto maturity model.

2. Understand the importance of crypto-agility in your organization and establish it as a core practice.

3. Work with leading vendors to establish digital certificate best practices and ensure they are tracking PQC industry progress to help you stay ahead of the curve, including with their products and solutions. Change rarely happens quickly, so it’s better not to wait, but to address your crypto-agility now.

Story image
Microsoft releases latest edition of Security Endpoints Threats report
he latest iteration of the report sheds more light on the difference in exposure and response to cyber threats between developed and developing countries in APAC.More
Story image
Cybersecurity spending slumps - but swift recovery expected
New research from GlobalData found that the industry will recover after this initial slump to be worth almost US$238 billion by 2030.More
Story image
Research: Rapid growth of embedded security market inevitable
With the rise of IoT, as cybercriminals find new ways to gain access to devices, new secure embedded hardware can block their points of entry.More
Story image
Businesses move to cloud-based security solutions in a bid to support remote working
Cloud-based security tools are becoming increasingly popular following the rise in remote working during COVID-19, including a marked increase in businesses using such tools to protect of corporate financial information.More
Story image
Rackspace and Cloudflare join forces for managed edge security
Rackspace and Cloudflare join forces for managed edge security The solution includes a web application firewall, DDoS protection, DNS services and a global content delivery network, backed by 24/7 support.More
Story image
Illumio launches Zero Trust endpoint protection solution for our digital, remote world
“As organisations were forced to transform overnight to allow for remote work, a host of endpoint security issues that have either been ignored or invisible until now were brought to the forefront."More