Capgemini-Y2Q：量子安全密码之旅（英）-2023-15页_2mb

报告摘要

Y2Q: A Journey to Quantum Safe Cryptography Summary

Historical Context

The Y2Q (Year 2024 Quantum Problem) is drawn from the Y2K (Year 2000) issue, which stemmed from a memory-saving method in software. In 1993, the Y2K problem was highlighted in "Doomsday 2000," leading to worldwide spending of about $308 billion. Today, Y2Q arises from Shor's Algorithm (1994), which poses a threat to current cryptography with quantum computers, potentially breaking RSA, ECC, and AES if sufficiently powerful machines exist.

Quantum Threat Explanation

Quantum computers leverage quantum physics principles (superposition, entanglement) to solve problems faster than classical systems. Specifically:

Shor's Algorithm enables fast prime factorization, targeting asymmetric cryptography (e.g., RSA, ECC).
Grover's Algorithm could attack symmetric keys (e.g., AES).

This threat disrupts critical systems, including communications and infrastructure, by compromising encryption.

Solutions Overview

Two primary solutions are proposed:

Post Quantum Cryptography (PQC): Based on classical methods, expected to integrate with existing infrastructure, suitable for widespread adoption; being standardized by NIST with algorithms like CRYSTALS-KYBER and Dilithium.
Quantum Key Distribution (QKD): Uses quantum physics for secure key exchange, requiring special hardware and benefits from properties like disturbance detection, but less practical for large-scale deployment due to hardware needs.

Comparisons with Y2K

Y2Q shares similarities with Y2K, such as global impact and need for trained engineers, but key differences include:

Timeline Uncertainty: Y2K had a clear deadline, while Y2Q's threat emergence is unknown, with potential timelines extending over years.
Threat Source: Y2K was internal, whereas Y2Q involves external, malicious actors with potential for delayed damage.
Implementation: Y2K was typically a one-time upgrade; Y2Q requires ongoing "crypto agility" and multi-year roadmaps, adding complexity and uncertainty.

Factors Influencing Uncertainty

Several elements heighten risks around Y2Q:

Shelf Life of Systems/Equipment: Infrastructure with long lifespans (e.g., >10 years) must prioritize updates, especially for over-the-air authentication.
Data Vulnerability: Data stored now could be decrypted later, incentivizing protection for data with extended value.
Quantum Evolution: Rapid advancements in quantum technology shorten available time for migration, escalating risks.

Global Challenges and Developments

Efforts include:

Standardization: NIST leads in standardizing PQC algorithms, aiming for 2024 releases (e.g., CRYSTALS-KYBER).
Regulatory and Insurance Pressures: Regulations like GDPR and cyber insurance premiums (e.g., 28% increases reported) stress quantum risks, with insurers possibly halting coverage for state cyberattacks.
Government Actions: US and international bodies (G7, NSA) are passing laws and setting deadlines (e.g., NSA's 2035 adoption for quantum-resistant algorithms) to prepare for the transition.
Economic Impact: Global Y2K costs were ~$308 billion; Y2Q is projected to cost up to $1 trillion, making it a larger, long-term challenge requiring significant investment.

Opportunities for Global IT Industries

The IT industry, notably India, benefited massively from Y2K by providing services, leading to growth from ~$100 million to $227 billion by 2022. For Y2Q, India can leverage its strong R&D capabilities in quantum technologies to lead in PQC and QKD solutions, positioning itself as a key player in a multi-decade transition.