Transitioning to QSC
0 likes19 views
The NCSC advises large organizations to prepare for quantum computer attacks by integrating this threat into their long-term planning, anticipating a shift to quantum-safe cryptography (QSC) as NIST standards are finalized. Until QSC-compliant products are available, organizations should maintain current cybersecurity practices and evaluate priority systems for transition. There will also be a transitional period where both traditional and quantum-safe cryptography must be supported simultaneously.
Transitioning to QSC
- 1. TRANSITIONING TO QSC D o m e n Z a v r l
- 2. DOMEN ZAVRL 2 The NCSC recommends that large organizations and businesses incorporate the threat of attacks from quantum computers into their long-term plans. The NCSC believes that major commercial services and products will make the transition to QSC as soon as the NIST standards become available and the relevant protocols have been updated to support QSC. T R A N S I T I O N I N G T O Q S C
- 3. DOME N ZAVRL 3 It’s recommended that most users continue to follow their current best practices regarding cyber security until the development of QCS standard-compliant products occurs. RECOMMENDED COURSES OF ACTION It’s recommended that most users continue to follow their current best practices regarding cyber security until the development of QCS standard-compliant products occurs. For organizations that are responsible for their own cryptographic infrastructure, it’s a good idea to factor in the transition to QSC into their long-term roadmaps. It’s recommended that these organizations undertake investigatory work to discover which of their systems are high priority when it comes to the transition. Such priority systems could be elements of public-key infrastructure that incorporate certificate expiry dates far in the future or systems that process sensitive personal data. THE INTERIM PERIOD It is expected that there will be an interim period when organizations will need to operate both traditional and quantum-safe cryptography simultaneously. During this time, support for conventional PKC will need to continue.
- 4. DOMEN ZAVRL For more information about this topic, visit the blog of Domen Zavrl.