NCSC's Roadmap for Quantum-Safe Cryptography: Preparing for the Future of Cybersecurity

Executive Summary: On October 16, 2024, Locktera highlighted recommendations from the U.K. National Cyber Security Centre (NCSC) urging organizations to prepare for the transition to post-quantum cryptography. The guidance emphasizes developing cryptographic inventories, evaluating quantum-resistant algorithms, adopting risk-based migration strategies, and considering hybrid cryptographic approaches to address emerging quantum computing threats. Organizations handling sensitive, long-lived information face particular risks from attacks that capture encrypted data today for potential decryption in the future. Locktera’s hybrid security architecture aligns with these preparation strategies by combining established AES-256 encryption with post-quantum cryptographic technologies to strengthen data integrity, support long-term protection, and help organizations prepare for an evolving cybersecurity landscape.

Dallas, Texas — October 16, 2024  The U.K. National Cyber Security Centre (NCSC) has issued a number of recommendations for preparing for quantum-safe cryptographic systems as part of their overall cybersecurity strategy. Their key points are as follows:

Transition Planning:

Organizations are urged to begin planning their transition to quantum-safe cryptography now, even though fully capable quantum computers have not yet been built. This proactive stance ensures that systems are protected when quantum computers become a practical threat.

They emphasize the need for organizations to create a “cryptographic inventory” to understand where cryptography is used in their systems and prepare a strategy for migrating to quantum-resistant algorithms.

Quantum-Safe Algorithms:

The NCSC endorses the efforts of NIST (National Institute of Standards and Technology), which is working on standardizing quantum-safe algorithms. NCSC suggests that businesses pay close attention to this ongoing work and start evaluating these algorithms for future use.

NCSC also recommends that organizations follow developments in the Post-Quantum Cryptography Standardization project, which includes algorithms like FALCON, CRYSTALS-Kyber, and CRYSTALS-Dilithium.

Hybrid Approach:

For the time being, the NCSC advises that a hybrid approach (combining both classical and quantum-safe cryptography) may be a practical short-term solution. This approach allows businesses to maintain current security levels while preparing for the eventual shift to fully quantum-safe systems.

Awareness and Education:

The NCSC stresses the importance of organizations becoming educated on quantum computing and its future risks. Businesses should build awareness within their teams and invest in understanding how quantum computers will impact cybersecurity.

Adopt a Risk-Based Approach:

While preparing for quantum computing, the NCSC recommends adopting a risk-based approach. This includes assessing the criticality and lifespan of encrypted data—data with long-term sensitivity (e.g., medical records, national security data) may be at greater risk of being decrypted by future quantum computers, even if stolen today.

These recommendations encourage organizations to be proactive rather than reactive in adopting quantum-resistant security measures.

Locktera’s Hybrid Approach

Locktera’s hybrid approach to quantum-safe encryption leverages both classical and post-quantum cryptographic algorithms to ensure robust data protection against both current and future threats. By integrating AES-256, a widely recognized and time-tested symmetric encryption standard, with advanced post-quantum cryptography (PQC) algorithms designed to resist quantum computing attacks, Locktera achieves a dual-layer defense mechanism. AES-256 provides strong encryption against today’s threats, while PQC algorithms, which are resistant to the computational capabilities of quantum computers, future-proof the security of sensitive data. This hybrid model ensures that even if quantum computers become capable of breaking classical encryption methods, the post-quantum algorithms will continue to protect encrypted data, offering comprehensive and long-term security.