The extraordinary computational power of quantum computers makes them a double-edged sword. While they have the ability to optimize communication, medicine research, and artificial intelligence, their dark side can completely nullify all encrypted data, leading to unethical and disruptive changes in the future.

As a consequence, agencies have started making efforts to update cryptographic inventory and prioritize systems in hopes of migrating towards post-quantum cryptography (PQC) standards. US federal agencies have estimated that the transition to PQC will cost up to 7.1 billion dollars. But this is only an estimate. The price will most likely increase as quantum computers are developed and become more sophisticated.

This migration necessitates the identification and replacement of numerous systems that are incompatible with PQC algorithms, especially the older devices with embedded cryptographic algorithms. Cryptographic networks are interconnected. So if one system fails in its migration, others will be unable to migrate either.

To expedite this transition, the National Institute of Standards and Technology (NIST) has standardized 3 strong PQC algorithms: FIPS 203, FIPS 204, and FIPS 205. These algorithms present businesses with three robust PQC solutions.

FIPS 203 and FIPS 204 utilize a lattice-based algorithm, where the lowest common multiple amongst several numbers is represented as a vector within a lattice. This structure is versatile and efficient, capable of executing both general encryption and digital signature algorithms.

On the contrary, FIPS 205 employs a hash-based algorithm that specializes in digital signature and verification. While it is not as flexible as the lattice-based algorithm, it has been “time-tested” for significantly longer (close to 50 years). The fact that no proven theory can crack its encryption is indicative of its strength.

As we embark on a new chapter in the course of our history, we must realize our responsibility in dictating our fate during this quantum shift. By proactively mitigating the potential harm posed by quantum computers, we can harness the fortes and revolutionary discoveries that this technological phenomenon elicits.

To achieve this goal, we must prepare to sacrifice money, time, and effort in order to integrate PQC standards into our everyday lives. By refusing to act, we leave our digital world vulnerable to quantum threats that could completely rupture our digital infrastructure, causing irreversible damage that no amount of money or time can repair.

After 8 years of intense efforts, in response to the increasingly apparent dangers of post-quantum cybersecurity threat, the National Institute of Standards and Technology (NIST) has finally standardized three post-quantum cryptography algorithms on August 13th, 2024: FIPS 203, FIPS 204, and FIPS 205. These algorithms relying on lattice and hash function-based cryptography are designed to withstand the power of quantum computers. NIST strongly advises businesses to act NOW – to adapt to quantum-safe solutions so as to protect their data against quantum threats.

While industries in the finance and telecom sectors are making extensive plans to adapt to these changes, many vulnerable businesses have made little to no preparation.  Some aren’t even aware of the gravity of the situation. Without a defined deadline attached to the quantum threat, businesses are not under any obligation to make changes right away. This is a dangerous oversight because the method of “harvest now, decrypt later” can bring disasters to businesses once the bad guys with access to quantum computers target on them. Quantum threats can strike at any moment and cause irreversible consequences.  All businesses should take action NOW.

To prepare for the post-quantum world of cybersecurity, companies should launch pilot projects that incorporate post-quantum algorithms into their existing infrastructures. This will enable companies to explore the benefits of post-quantum cryptography and migrate to the post-quantum world in time.

IronCAP™ offers all the NIST-approved algorithms via its versatile software and hardware interfaces to safeguard digital assets and communications. IronCAP™ is compatible with industry standards such as PKCS#11 through its ICCHSM solution, serving as a seamless intermediator between applications and the IronCAP™ cryptography.

Furthermore, IronCAP™ offers a public key cipher that can be added into Libgcrypt, enabling backward compatibility with other key ciphers such as RSA, and ECC, promoting smooth migrations of post-quantum technologies, Similarly, our IronCAP™ technology can also be accessed via the OpenPGP hardware security module (HSM) compliant with the IronCAP™ cryptography.

As we proceed into a new chapter of this digital era filled with uncertainty, a universal call to enact post-quantum cryptography must occur to maintain the stability and continuity of our civilization. Although NIST standardization will help spread awareness, industries must comply. Proactive measures such as launching pilot projects and implementing our quantum-safe IronCAP™ technology will nullify the quantum threats and create a safe digital landscape.

On Sunday August 25th, 2024, Pavel Durov, the 39-year-old Russian-born billionaire and CEO of Telegram was arrested at a French airport as part of a broad investigation into criminal activities on the messaging platform. Telegram’s non-cooperation to share data with investigators led to allegations that it may be inadvertently facilitating illegal activities such as money laundering, drug trafficking, and terrorism. Some people believe it’s politically motivated because Durov refused to provide authorities with the platform’s “decryption master key” for certain “secret messages”.

Telegram is one of the major social media platforms in the world having more than 950 million users. Its popularity is driven by its light censorship on the content posted and its heavy emphasis on secure communications. Hence the platform has been favoured by privacy/security conscious people and particularly those who want to stay anonymous.

However, Telegram’s cryptographic protocol is not truly end-to-end because the decryption key is not solely possessed by their users. Techies believe that Telegram has the ability to decrypt the communications of their users. Whether the arrest of Durov was driven by criminal, cybersecurity or political concerns, the likely motive is to force a backdoor to the encrypted messages and gain access to the personal information of the Telegram users.

From the point of view of cybersecurity, a truly secure system is a zero-trust system whereby no one other than the recipient(s) of the information shall have the ability to decrypt it.

Pavel Durov’s arrest exposes a major controversial point of discussion in the realm of digital security: to be totally secure or not to be? While total zero-trust security can be used to safeguard data and privacy, it can be exploited by criminals to induce illegal activity without the fear of being detected. To the contrary, a system with a backdoor can plug criminals but expose serious security if the backdoor is possessed by an adversary. The situation can be a global disaster when it’s deeming national security or warfare. This will surely become an alarming issue when the post-quantum era approaches.

We at IronCAP™ believe we provide a perfect balance between privacy and security in our solutions. The IronCAP X™ email security system is a good example of zero-trust end-to-end mechanism whereby only the recipient(s) of the emails have the ability to decrypt and read the messages. In other words, no authority including the IronCAP X™ system has any backdoor nor any master key. Also, IronCAP X™ is not a platform that allows content promotion or large group messaging, i.e., unlikely to be exploited for illegal activities. It’s tailored for privacy conscious users for their secure communications. It is a prime example of how security and privacy can coexist. Authenticity and privacy together offer a workable defense against the escalating problems in our post-quantum world.

There is no questioning that the development of quantum computers will potentially enhance various aspects of our life. However, they also introduce problems that undermine the security of our data, threatening the cybersecurity we rely on.

“Q-Day” refers to the day when quantum computers reach the power and qubit reliability enough to render current encryption algorithms (e.g. RSA, ECC) useless, rendering digital data vulnerable to exploitation. Unless defensive protocols are put in place, this event could lead to detrimental consequences within financial networks, military systems, and societal infrastructures.

Earlier estimations suggested that Q-Day wouldn’t arrive until 2029. However, research indicates that improvements in qubit reliability is amplifying efficiency, shortening the expected date. Whether or not post-quantum cryptography is integrated into our technologies, the arrival of the Q-Day is accelerating without any means of slowing down.

The other impending threat is the concept of “Harvest Now, Decrypt Later”. This strategy involves stealing encrypted data with the intent of decrypting it in the foreseeable future when quantum computers with sufficient power and qubit reliability become operational.

Given this threat, transitioning to post-quantum cryptography becomes significantly more imperative. Any form of modern encryption could be vulnerable to decryption once the Q-Day arrives. For instance, compromised data regarding the functionalities of a nuclear weapon would be exploitable when quantum computers emerge, leading to widespread disruption on a global scale.

In response to this situation, we have developed IronCAP^TM that offers a comprehensive collection of the most prevalent post-quantum cryptographies that have been standardized by the National Institute of Standards and Technology (NIST). These encryption and digital signature algorithms experience thorough testing to determine their effectiveness against quantum threats. IronCAP^TM promises security, efficiency, and coherence for encryption/decryption/signing/verification/key-generation algorithms to reduce the time consumption as well as the storage space required to complete these processes.

Along with its quantum-safety, IronCAP^TM also enhances efficiencies by taking advantage of modern CPUs such as Advanced Vector Extension 2 (AVX2) to allow seamless implementation of post-quantum security without altering computational structure, ensuring its implementations are accommodating.

IronCAP^TM is more than just a technological advancement, it is an accessible, yet powerful doorway to a secure future promoting confidentiality within both our personal lives and the digital world. IronCAP^TM works as the perfect guardian, guiding and protecting us as we transition into a post-quantum era!