《MIT量子黑客威胁评估报告》-23页_3mb

Facing Tomorrow's Quantum Hackers Today

Core Content

This report, published by MIT Technology Review Insights in collaboration with the Technology Innovation Institute (TII) in Abu Dhabi, explores the implications of quantum computing on current cybersecurity systems and outlines the steps enterprises and organizations should take to prepare for the quantum threat.

Main Viewpoints

• Quantum Computing Threat: A fully developed quantum computer could break today's public-key cryptography systems, which are the foundation of secure digital communications.
• Proactive Preparation: Enterprises and organizations must begin protecting their data and systems against quantum-based attacks now, even though a cryptographically relevant quantum computer (CRQC) is not yet available.
• Hybrid Solutions: A hybrid approach, which combines quantum-resistant algorithms with classical ones, can serve as a temporary measure but should not be a long-term solution.
• Expert Collaboration: Quantum computing involves contributions from physicists, cryptographers, computer scientists, and mathematicians, and enterprises need to build or acquire quantum expertise.
• Global Quantum Development: Many countries and companies are investing heavily in quantum computing, with significant progress being made in both hardware and software development.

Key Information

• Quantum Computing Overview: Quantum computers use qubits to process data in superposition and entanglement, allowing them to perform complex computations much faster than classical computers.
• Quantum Cryptography: This uses quantum mechanics to securely transmit data, such as through quantum key distribution (QKD), which relies on photons.
• Post-Quantum Cryptography: This is a set of cryptographic algorithms designed to resist attacks from both classical and quantum computers. It is also referred to as quantum-resistant cryptography.
• CRQC Definition: A cryptographically relevant quantum computer (CRQC) is one that can break public-key cryptography and requires millions of qubits.
• NIST's Role: The National Institute of Standards and Technology (NIST) has been working since 2016 to standardize post-quantum cryptographic algorithms. It is expected to finalize its selection in 2022.
• Global Quantum Strategy: As of January 2021, 17 countries have national strategies or initiatives to support quantum technology research and development. Many others are involved in international partnerships or have government-led programs.
• Quantum Threat Timeline: Experts predict that a CRQC could be developed within a decade, and the threat to current encryption methods is imminent.

Definitions

• Quantum Computing: A computing technique that leverages quantum mechanics to process data significantly faster than classical computers.
• Quantum Cryptography: A cybersecurity method based on quantum mechanics to ensure secure data transmission.
• Post-Quantum Cryptography: A cryptographic approach that uses mathematical algorithms to resist quantum computing attacks.
• Qubit: A basic unit of quantum computing that can represent multiple states simultaneously.
• Superposition and Entanglement: Qubits can exist in multiple states at once (superposition), and pairs of qubits can influence each other regardless of distance (entanglement).
• Decoherence: The loss of quantum state due to external disturbances, making qubits unstable.
• Quantum Advantage and Supremacy: Quantum advantage refers to outperforming classical computers in specific tasks, while quantum supremacy is the ability to solve problems that classical computers cannot in a reasonable time.

Challenges and Recommendations

• Expected Challenges: Transitioning to post-quantum cryptography is complex and requires significant changes to existing systems.
• Hybrid Transition: While a hybrid model can help in the transition, it should not be considered a long-term solution.
• Government and C-Suite Actions: Governments should support research and standardization efforts, while C-suite executives must ensure that their organizations are prepared for the quantum age.
• No Better Time Than Now: The report emphasizes that now is the time to start preparing for the quantum threat, as the development of a CRQC is inevitable.

Conclusion

The report highlights the urgent need for enterprises and governments to adopt quantum-resistant algorithms and to be crypto-agile in the face of emerging quantum threats. With the rapid progress in quantum computing, the window for preparation is closing, and proactive measures are essential to secure the future of digital communications and data.