卡内基国际和平基金会-Implications-of-Quantum-Computing-for-Encryption-Policy_14页_440kb

Summary of "Implications of Quantum Computing for Encryption Policy"

Core Content

This document explores the implications of quantum computing on encryption policy, focusing on how quantum computers could undermine current encryption methods and the necessary steps to transition to quantum-safe encryption. It is produced by the Carnegie Endowment for International Peace and Princeton University's Center for Information Technology Policy as part of an ongoing dialogue on encryption policy.

Main Viewpoints

• Quantum Computing's Impact on Encryption: Quantum computers, based on quantum mechanics, can perform certain computations much faster than classical computers. This could significantly weaken encryption systems that rely on mathematical problems difficult for classical computers to solve.

• Quantum Threats to Encryption Algorithms:

  • RSA and Similar Algorithms: These are vulnerable to quantum computing due to Shor's Algorithm, which can efficiently factor large numbers. Once a sufficiently large quantum computer is available, such algorithms will no longer be secure.
  • Symmetric Algorithms: These are less vulnerable, as Grover's Algorithm only reduces the search time by half. However, increasing key sizes (e.g., from 128 bits to 256 bits) can offset this risk.

• Transition to Quantum-Safe Encryption: As quantum computers become practical, organizations must update their encryption systems to use quantum-safe algorithms. This transition could take a decade or more, and government agencies should begin adopting quantum-safe encryption now, especially for data needing long-term security.

• Key Escrow Vulnerability: Key escrow systems, which rely on public-key encryption, could be compromised by quantum computers. If not updated to quantum-safe methods, adversaries with quantum computing capabilities could later decrypt stored data using the escrow keys.

• Future of Quantum Computing: While quantum computing is still in its early stages, experts predict that practical quantum computers may become available within the next 10–20 years. The development of such systems is likely to be rapid and transparent, making it difficult to keep them secret.

Key Information

• Quantum Computing Basics: Unlike classical computers that use bits (0 or 1), quantum computers use qubits that can exist in multiple states simultaneously. This allows for faster computation in certain scenarios.

• Current State of Quantum Computing: As of 2019, quantum computers have not yet reached a size or speed that provides practical advantages over classical computers. However, research is progressing rapidly, and the number of physical qubits has increased to 72.

• Quantum Algorithms:

  • Shor's Algorithm: Can break RSA and similar public-key encryption algorithms by efficiently factoring large numbers.
  • Grover's Algorithm: Can speed up brute-force searches, making symmetric encryption less secure unless key sizes are increased.

• Recommendations:

  • Organizations and governments should begin adopting quantum-safe encryption methods now, especially for data that needs to remain secure for more than a decade.
  • The transition to quantum-safe encryption will require time and careful evaluation of new algorithms to ensure they are both secure and quantum-resistant.

• Key Escrow Risks:

  • Escrow systems using non-quantum-safe encryption could be vulnerable to quantum decryption in the future.
  • Adversaries may store encrypted data and decrypt it later when quantum computing becomes available, making key escrow a potential security risk.

Conclusion

The emergence of quantum computing poses a significant challenge to current encryption standards. While the technology is not yet mature, the potential for future quantum computers to break existing encryption methods necessitates proactive policy and technical measures. The transition to quantum-safe encryption is essential for maintaining data security in the long term, and key escrow systems must be re-evaluated to ensure they remain viable against quantum threats.