by 
David Close, Chief Solutions Architect
Traditional encryption methods, once the cornerstone of digital security, are becoming increasingly vulnerable as quantum computing evolves. To counteract these emerging threats, new standards in post-quantum cryptography (PQC) have been established.
The NIST (National Institute of Standards and Technology) has recently finalized three PQC standards: 203-Kyber, 204-Dilithium, and 205-SPHINCS+. These algorithms represent the best defense we currently have against the potential threats posed by quantum computers.
- 203-Kyber (ML-KEM) is a lattice-based key encapsulation mechanism ensuring secure key exchanges even with quantum computing capabilities.
- 204-Dilithium (ML-DSA) is a lattice-based digital signature scheme that offers strong security for digital signatures and guarantees data integrity and authenticity.
- 205-SPHINCS+ (SLH-DSA) is a stateless hash-based signature scheme, providing a versatile option for secure, long-term digital signatures.
Adopting these standards isn't just future-proofing your systems; it's crucial for maintaining robust security today.
While quantum computing is in its infancy, the threats it poses—such as 'Harvest Now, Decrypt Later' (HN/DL) attacks—are both significant and imminent. Embracing these new standards ensures your data remains secure today and in the future.
Use Cases: Real-World Applications of PQC
PQC's significance goes beyond theory; it’s crucial for protecting real-world applications across industries like financial services, healthcare, government, defense, and aerospace, where quantum threats could have devastating consequences.
Satellites In Space
Imagine a satellite launched into orbit with a 20-year lifespan, initially protected by conventional cryptography like ECC.
As quantum computing progresses, this encryption could become vulnerable.
In a typical encryption use case, the public key is used to encrypt data, while the private key decrypts it. This ensures that only the private key holder can access the encrypted information.
Code signing reverses the typical encryption/decryption process: the private key signs the code, creating a unique signature that confirms the code's authenticity. The public key then verifies this signature, ensuring the code hasn’t been altered. This dual use in both encryption and authentication strengthens security, protecting data and software integrity.
This is critical for code signing as it applies to PQC; new algorithms replace RSA/ECC to secure public and private keys, ensuring both encryption/decryption and code-signing remain quantum-resistant.
When the satellite receives a firmware update, it verifies this signature before allowing the update to be installed, blocking any unauthorized or malicious software. With a hybrid CA structure, the satellite’s firmware can transition to a PQC algorithm without physical intervention.
Mission Control can simply send an update signed with the PQC algorithm, maintaining security without interruption.
This approach applies to any long-lifespan IoT device, such as cars or surgery robots, keeping them protected as technology evolves.
Harvest Now, Decrypt Later (HNDL)
The growing adoption of PQC is driven by various factors, one of which is the rise of "Harvest Now, Decrypt Later" attacks. In these attacks, cybercriminals gather encrypted data with the expectation of decrypting it in the future using quantum computers.
By proactively integrating PQC solutions, your organization can safeguard your data from potential future threats. This ensures that even if the data is harvested by malicious parties, it will remain secure and resistant to decryption attempts.
Hybrid Model
Futurex’s approach to PQC is unique in that we’ve developed our own PQC functionality internally, unlike many other vendors who rely on third-party solutions. This allows our PQC algorithms to be deeply integrated and optimized within our HSMs.
A hybrid Certificate Authority (CA) solution combines conventional cryptographic signatures—like ECC and RSA—with PQC signatures within a single certificate. This dual-signature approach keeps your systems compatible with current technologies and fully prepared for the quantum future.
There’s no need for an all-at-once migration; you can transition at your own pace, knowing that your security infrastructure is already aligned with the latest standards.
Future-Proof PQC with Futurex
As cryptography evolves, so does Futurex. With the 206-Falcon standard (FN-DSA) on the horizon, CryptoHub is already gearing up to support this new algorithm upon its finalization. Stay ahead of adversaries who may collect encrypted data today, anticipating decryption by quantum computers in the future.
By implementing PQC now, you protect your data against future threats, ensuring it will remain secure even if harvested.
Whether securing a satellite in space or providing role-based access within your organization, PQC is the future of cryptographic security. Futurex is here to help lead the way.
The transition to post-quantum cryptography is not just a necessary step; it’s a vital one.
As quantum computing advances, your security measures must evolve. Futurex’s CryptoHub platform integrates the latest NIST PQC standards so your organization is prepared for whatever the future holds.
Speak with Futurex today to implement PQC solutions to secure your systems against tomorrow’s quantum challenges.