NASA’s new dark energy space telescope can also detect killer asteroids
technologyreview.com·3h ago
Security
Cloudflare Blog·Jun 23·5 min read
The post-quantum EO is an important milestone. Now it’s time to get to work
TL;DR
As quantum computing advances, traditional encryption methods like RSA and Elliptic Curve Cryptography are at risk of being compromised. The U.S.
✦ Why It Matters
Engineers should prepare for the transition to post-quantum encryption and authentication to ensure system security.
Key Takeaways
- Begin planning for post-quantum encryption adoption by 2030.
- Evaluate current systems for vulnerabilities to quantum attacks.
- Implement post-quantum key agreement methods in your products.
- Stay informed about updates from NIST regarding cryptographic standards.
Full Summary
The rise of quantum computing poses a significant threat to current encryption methods, particularly public-key cryptography like RSA and Elliptic Curve Cryptography, which could be easily broken by powerful quantum computers. In response, Executive Order 14409 was signed, requiring federal agencies to transition to post-quantum encryption by 2030 and post-quantum authentication by 2031.
Cloudflare has proactively moved its target for full post-quantum security to 2029, with over two-thirds of its browser traffic already secured using post-quantum encryption techniques. The company’s SASE platform, Cloudflare One, supports post-quantum encryption across various protocols, including TLS and IPsec.
The order emphasizes the importance of securing High Value Assets (HVAs) and high-impact systems, which are critical for national security. Cloudflare's ongoing efforts since 2019 align with the EO's goals, providing a roadmap for effective transitions to post-quantum standards.
This initiative not only enhances security but also sets a precedent for industry-wide adoption of advanced cryptographic measures.