UK cybersecurity agency warns over risk of quantum hackers (Category Security)
The Guardian written News that the UK Cyber Security Agency is recommending critical national infrastructure to major organisations and operators (such as energy or transport) Switch to post-quantum cryptographic techniques to prevent future security threats.
Looking deeper, the UK’s National Cyber Security Centre (NCSC) whole comprehensive guidance Migration to Post-Quantum Cryptography (Post-Quantum Cryptography, PQC) Strategic roadmap, which consists of three phases - Phase. 1 (before 2028 year): Organizations should identify migration targets, conduct full crypto dependency detection, and develop an initial migration plan. This includes identifying systems that need updating and understanding vulnerabilities. - Phase. 2 (2028-2031): Organizations must complete PQC migration for their high-priority systems, ensure infrastructure readiness, and refine migration plans. This phase allows for adjustments as PQC technologies evolve. - Phase. 3 (2031-2035): Complete PQC migration across all systems, services and products. K 2035 Organizations should fully transition to quantum-resistant encryption.
The need for migration stems from the fact that current encryption methods, such as RSA, are based on mathematical problems that classical computers struggle to solve, but quantum computers can potentially be easily hacked. NCSC recommends adoption of NIST-approved PQC algorithms, including
- ML-KEM (FIPS 203) - Module-Lattice-Based Key-Encapsulation Mechanism
- ML-DSA (FIPS 204) - Module-Lattice-Based Digital Signature Standard
- SLH-DSA (FIPS 205) - Stateless Hash-Based Digital Signature Standard
P.S. Interesting against this background are the statements of large companies like Microsoft, which compete in which of them achieved quantum supremacy or made a breakthrough, as was the case with other companies. announcement Majors. Conventionally, practical quantum computers are getting closer, which means that we should gradually switch to other algorithms in critical information.
P.P.S. I tried to look for similar standards in Russia and did not find, although there are implementations of post-quantum encryption algorithms.Kryptonite: Rosehip" (The guys wanted to choose cool naming, and it turned out kringe). I think that Russian facilities of critical infrastructure will also have a roadmap similar to the one that is currently being built. presented NCSC 20 March 2025 years.
#Security #Processes #Engineering #Software