2022-09-12-世界经济论坛-Transitioning_to_a_Quantum-Secure_Economy_35页_3mb

Quantum-Secure Economy Transition Analysis

Background & Challenges

• Quantum computing poses a significant threat to current encryption methods, potentially disrupting digital economies.
• Unlike Y2K, the transition timeline is uncertain but expected within 10 years, leading to potential procrastination.
• Key impacts include: breaking public-key cryptography, enabling data breaches (e.g., sensitive health/financial data), threatening cryptocurrencies, and facilitating "harvest now, decrypt later" attacks.

Transition Strategies

1. Immediate Actions:

   • Conduct quantum readiness and risk assessments.
   • Inventory cryptographic assets and understand data longevity.
   • Develop a phased transition roadmap.

2. Phased Approach:

   • Short-term: Raise awareness, pilot small-scale PoCs, and implement hybrid solutions (e.g., integrating classical and post-quantum cryptography).
   • Mid-term: Deploy larger-scale quantum-safe solutions, refine crypto-agility.
   • Long-term: Full adoption of quantum-secure systems.

3. Hybrid Solutions:

   • Leverage hybrid approaches that maintain current security while overlaying quantum-resistant protocols.

Quantum-Secure Risk Management Framework

Framework Components:

1. Define: Create a quantum security vision and identify strategic drivers (e.g., threat materialization, regulatory pressures).
2. Identify: Map quantum threats and prioritize based on organizational context.
3. Plan: Structure actions into three workstreams:
   • Talent & Education: Address skill gaps, train staff, establish crypto champions.
   • Governance & Processes: Integrate quantum risks into existing frameworks; develop standards and policies.
   • Technology & Infrastructure: Assess for interoperability, implement PQC, QKD, QRNG.
4. Execute: Ensure success through four key factors:
   • Standards & certifications
   • Ecosystem cooperation
   • Technological innovation & sustainable investments.

Stakeholder Responsibilities

• Organizations: Incur costs for system upgrades, foster crypto-agility.
• Corporate Leaders/Boards: Set strategic direction, allocate resources.
• Cyber Leaders: Champion quantum initiatives within orgs.
• Policy-Makers: Establish international standards, support quantum awareness.
• Extended Ecosystem: Vendors must address quantum vulnerabilities in their products.

Available Technologies

• Post-Quantum Cryptography (PQC): Algorithms designed to resist quantum attacks; developing standards via NIST.
• Quantum Key Distribution (QKD): Secure key exchange based on quantum mechanics.
• Quantum Random Number Generation (QRNG): Generates high-quality entropy for cryptographic use.

Future Focus Areas

• Establish new partnerships for quantum resilience.
• Innovate via emerging tech (including hybrid systems).
• Prepare for disruption (e.g., blockchain vulnerabilities).
• Conduct ongoing research and workforce development.

Conclusion

• The transition to quantum-safe systems is inevitable and should not be delayed.
• Hybrid solutions, crypto-agility, and clear roadmaps are essential for smooth and secure transition.
• Collaboration across stakeholders and continuous innovation are required to address the quantum threat and harness its opportunities.