Quantum Computing

Cybersecurity Map Wednesday, 21. October 2020 12:00

Quantum computers have the potential to solve complex problems much more efficiently than traditional computers, but they also pose a security risk: They can crack existing encryption methods, which poses a considerable challenge, particularly for IT systems and archived data that are operated over the long term. Depending on estimates, it will be another 10-30 years before powerful quantum computers are available. Nevertheless, quantum-safe encryption methods are already available today, i.e. methods that are secure against attacks by quantum computers. In order to future-proof critical infrastructures and databases in Switzerland, there is an urgent need for an inventory of the cryptography used, the introduction of quantum-safe standards and the promotion of corresponding technologies.

The challenges

Long lifecycles of existing IT systems: Systems in critical infrastructures are often in use for decades. The operation of these systems could become insecure as soon as powerful quantum computers become available.

Long-term encrypted data sets: Legally archived data (10+ years) could be compromised by quantum attacks if quantum-safe procedures are not introduced.

Insufficient preparation for quantum-safe standards: Although new, quantum-safe cryptography standards have been published (e.g. NIST standards), plans for migrating existing systems are lacking in many places.

Recommendations for politics, business and society

Strategic risk analysis and inventory: Organisations should review the security requirements for data assets and systems that have a long service life and consider introducing quantum security procedures.

Promotion of quantum-safe technologies: When developing or procuring new software solutions, care should be taken to either directly utilise new, quantum-safe cryptography standards or use cryptographic algorithms that can be easily replaced by quantum-safe alternatives.

With these measures, Switzerland can secure its technological sovereignty and address the risks of quantum computing at an early stage.

Authors and subject responsibility

Umberto Annino, Microsoft | Raphael Reischuk, Zühlke Engineering AG | Bernhard Tellenbach, armasuisse | Andreas Wespi, IBM Research

Review Board