U.S. National Security Agency Issues Update on Crypto-Resistant Encryption

The U.S. National Security Agency (NSA) has issued a FAQ (PDF) titled “Quantum Computing and Post-Quantum Cryptography FAQs” where the agency explores the potential implications for national security following the likely arrival of a “brave new world” beyond the classical computing sphere. As the race for quantum computing accelerates, with a myriad of players attempting to achieve quantum supremacy through various, exotic scientific investigation routes, the NSA document explores the potential security concerns arising from the prospective creation of a “Cryptographically Relevant Quantum Computer” (CRQC).

A CRQC is the advent of a quantum-based supercomputer that is powerful enough to break current, classical-computing-designed encryption schemes. While these schemes (think AES-256, more common on the consumer side, or RSA 3072-bit or larger for asymmetrical encryption algorithms) are virtually impossible to crack with current or even future supercomputers, a quantum computer doesn’t play by the same rules, due to the nature of the beast and the superposition states available to its computing unit, the qubit. With the race for quantum computing featuring major private and state players, it’s not just the expected $26 billion value of the quantum computing sphere by 2030 that worries security experts – but the possibility of quantum systems falling into the hands of rogue entities. We need only look to the history of hacks in the blockchain sphere to see that where there is an economic incentive, there are hacks – and data is expected to become the number one economic source in a (perhaps not so) distant future.