Services
Cyber Security
Data and Cybersecurity to Fight off Cyberattacks
AWS Cloud
Grow, Innovate, and Transform with TCS and AWS Cloud
Highlights
- While the full potential of quantum computing is yet to be developed, researchers believe it poses a serious threat to data and communication systems that rely on cryptographic protocols.
- Asymmetric cryptography used within common internet protocols and applications on the cloud could soon be vulnerable to cyberattacks powered by quantum computers.
- Cloud providers have started preparing services to help enterprises gain familiarity with post-quantum cryptography algorithms and protocols and help prepare for the inevitable quantum risks.
On this page
The quantum way
Quantum computing has the potential to exponentially increase the computational power available for wide use.
Researchers believe that quantum machines will in the near future be able to complete complex parallel computations at unprecedented speed.
The world’s largest technology companies are investing in the development of quantum chips and machines, and governments are promoting quantum computing as well.
However, quantum chips remain an enigma, and using them in practical and scalable machines remains a significant challenge. Companies need to become familiar with what quantum machines can do. Large cloud computing service providers are helping organizations gain access to quantum computing resources and capabilities. By using managed quantum computing services on the cloud, organizations can better understand the power of quantum computers without building their own quantum infrastructure.
As breakthroughs in this field unfold, these machines may unlock new approaches to old optimization problems in areas such as route optimization and supply chain design. They could change how we model complex systems such as weather patterns or climate change. And quantum computers very likely will dramatically change the field of cryptography.
Companies should be taking steps now to keep up with quantum development and prepare for the future.
Being quantum safe
Securing asymmetric cryptography methods can ensure quantum safety.
Cryptography ensures the confidentiality and integrity of data and is vital to authenticate users and devices. With the likelihood of quantum computers solving cryptographic problems, cryptography might soon become obsolete.
There are two main types of cryptography: symmetric, which uses a shared secret key, and asymmetric, also known as public-key encryption. Researchers believe that current symmetric cryptography schemes when implemented correctly are safe, but that asymmetric schemes could be vulnerable to attacks as quantum computing becomes widespread.
Asymmetric cryptography is used within common protocols such as transport layer security (TLS) that are ubiquitous, enabling much of what we do online, including how we use the cloud. If asymmetric encryption becomes vulnerable, the security of data stored in digital formats will be threatened.
As this technology develops, companies need to arm themselves to secure communications between the cloud and the end user wherever asymmetric cryptography algorithms are used.
Cloud for quantum shift
Cloud services can help enterprises prepare for the quantum shift.
Cloud providers and other technology companies, academic institutions, and standards bodies are all working to develop effective post-quantum cryptography (PQC) algorithms to ensure the security of the cloud and online activity.
Companies are preparing for the potential benefits and risks that quantum computing may bring. A range of approaches are taking shape. Managed quantum computing services from cloud providers, such as Amazon Braket, Azure Quantum, and IBM Quantum Platform, allow researchers and developers—and businesses—to begin experimenting with computers from quantum providers. They also allow users to work with quantum algorithms that are run in simulation mode on classical computers.
At the TCS Quantum Computing Lab, we are working with organizations across the globe to help them explore, develop, and test business solutions that might leverage the power of quantum computing. The lab allows testing of PQC algorithms, making it possible to run proof of concept simulations for post-quantum security protocols.
Here are some aspects of quantum computing that organizations will want to learn about:
- Quantum-safe algorithms: Some cloud services used for managing cryptographic keys already support the use of quantum-safe cryptography. They offer algorithms that have been selected by the PQC standardization project run by the U.S. National Institute of Standards and Technology. These services offer a hybrid approach that combines classical and quantum-safe cypher suites for key exchange.
- Cloud cryptography libraries: This type of library includes a menu of quantum-safe algorithms that are available to cloud customers for testing application use cases. Using these libraries, organizations can experiment and integrate quantum-safe algorithms into their systems.
- Quantum key distribution (QKD) trials: QKD is a method that can be used to detect and prevent any interception of network traffic. Cloud providers are conducting trials for QKD, which could potentially be used in the future to ensure secure key exchange in a post-quantum world. Large cloud service providers are developing offerings to allow their customers to begin the all-important process of gaining familiarity with and testing or proving the application of new tools for a post-quantum world. By tapping into these services, organizations can minimize the immediate investment needed to experiment with quantum technologies. As quantum computing matures and becomes more generally available and affordable, these initial investments will help realize a better readiness for wider production adoption.
Being quantum-ready
Forward-looking enterprises can already take the first step to becoming quantum-ready.
Companies need to take steps now to keep up with quantum development and prepare for the future. A framework that will ensure their preparedness includes the following:
- Identify and evaluate the cryptographic algorithms and protocols that are in use across the enterprise, along with those used by contracted cloud services.
- Identify cryptography methods known to be vulnerable to quantum attacks, recognizing that this may change over time. Conduct a post-quantum risk assessment to prioritize applications and systems that should be quantum-ready.
- Execute proof-of-concept testing of post-quantum strategies using currently available PQC algorithms.
- Monitor and evaluate emerging industry solutions for quantum-proof security, paying particular attention to ongoing standards efforts. While we are still in the early days of quantum computing, it is essential that organizations prepare themselves to be resilient in a post quantum world, and there is no better time to start than now. Cloud-based quantum computing services can be stepping stones for organizations to experiment and develop their strategy and approaches to become a quantum-safe business.
