> **来源：[研报客](https://pc.yanbaoke.cn)** # Summary of "Quantum Preparedness of Hong Kong's Banking Sector" ## Core Content This document outlines the strategic importance of quantum computing and post-quantum cryptography (PQC) for the Hong Kong banking sector, emphasizing the need for proactive preparedness to mitigate risks and seize opportunities in the quantum era. ## Main Viewpoints - **Quantum Computing as a Strategic Opportunity**: Quantum computing has the potential to revolutionize financial services through improved risk analysis, portfolio optimization, fraud detection, and market simulation. However, its current implementation maturity is limited, with most applications in the exploratory or pilot stage. - **Quantum Cyber Risk**: The emergence of Cryptographically Relevant Quantum Computers (CRQCs) could threaten traditional cryptographic systems, particularly asymmetric encryption such as RSA and ECC, which could be broken by Shor's algorithm. Symmetric encryption is also at risk, though to a lesser extent due to the slower speed-up provided by Grover's algorithm. - **Post-Quantum Cryptography (PQC) as a Mitigation Strategy**: PQC is seen as a critical solution to future-proof financial systems against quantum threats. However, the transition to PQC is expected to be a multi-year effort, requiring comprehensive planning, investment, and coordination across the sector. - **HKMA's Role**: The Hong Kong Monetary Authority (HKMA) is actively supporting the industry through guidance, capacity-building, and collaboration with academic and industry partners. The goal is to promote a coordinated, forward-looking approach to quantum preparedness. ## Key Information ### Current Landscape in Hong Kong - Awareness of quantum computing is growing, but practical adoption remains limited. - Most banks have some awareness, with a smaller group exploring or piloting quantum applications. - The transition to PQC is seen as a long-term strategic initiative, requiring significant effort and resources. - The sector is at an early stage of transition, with formal governance, dedicated funding, and workforce training not yet fully established. ### Challenges in PQC Adoption - **Lack of Standardized Frameworks**: There is no widely accepted risk assessment methodology or industry-standard framework for PQC. - **Technical Complexity**: Building cryptographic inventories and migrating legacy systems are highly complex tasks. - **Legacy Infrastructure**: Accumulated technical debt and outdated systems complicate the transition to quantum-safe solutions. - **Uncertainty in Standards and Regulation**: The timeline for PQC implementation and regulatory clarity remain unclear. - **Internal Expertise Gap**: Many institutions lack the necessary expertise to implement and manage quantum-safe cryptographic systems. ### Recommended Actions for AIs 1. **Engage the Board**: Frame quantum risk as an enterprise risk and include it in risk governance discussions. 2. **Assign Accountability**: Identify an accountable owner with senior sponsorship and cross-functional mandate. 3. **Develop Cryptographic Inventory**: Commission a cryptographic inventory, understanding that it will be iterative and improve over time. 4. **Engage Critical Vendors**: Request post-quantum roadmaps and ensure quantum readiness is embedded in new contracts. 5. **Establish a Roadmap**: Document a clear transition plan that includes testing, implementation, and progress monitoring. ### Quantum Computing Use Cases - **Portfolio and Asset Optimisation**: Quantum algorithms like QAOA and QNNs can improve asset allocation and risk-return analysis. - **Fraud Detection**: QML methods can identify complex transaction patterns more efficiently than classical approaches. - **Sales Optimisation**: Quantum simulations and machine learning can enhance market predictions and trading strategies. - **Risk Management**: Quantum optimization and simulation can help in trade matching and settlement failure prediction. ### Current State of Quantum Computing - Quantum computing is moving toward early-stage commercialization, but it is still prone to hardware errors and requires specialized expertise. - Major quantum computing approaches include superconducting, trapped ions, neutral atoms, and photonic technologies. - Leading companies like IBM, Google, and IonQ are at the forefront of quantum computing development, with varying access methods and device capabilities. ### Quantum Cyber Threat Timeline - The timeline for CRQC availability is uncertain, but the risk of "Harvest Now, Decrypt Later" (HNDL) attacks is real. - Mosca's Theorem highlights the risk that sensitive data may be exposed if the time to migrate to PQC exceeds the time until CRQC becomes available. - The economic impact of a quantum-enabled data breach could be massive, with estimates suggesting trillions of dollars in potential exposure. ## Way Forward - **Early Preparation is Essential**: Banks should start with awareness, planning, and pilot activities to build foundational capabilities. - **Collaboration Across Ecosystem**: Quantum preparedness requires joint effort between banks, technology providers, academic institutions, and regulators. - **Sustained Commitment**: The transition to quantum-safe banking will require long-term investment and commitment. - **Enhanced Resilience and Trust**: By acting now, the banking sector can enhance customer trust, operational resilience, and financial stability in the face of future quantum threats. ## Conclusion Quantum computing and PQC represent both opportunities and risks for the financial services sector. Hong Kong's banking industry must prepare for the quantum era through strategic foresight, collaboration, and structured planning to ensure resilience and continued innovation in the face of evolving technology.