NIST Finalizes Three Post-Quantum Encryption Standards for Secure Data

Sufficiently powerful quantum computers could expose personal information, financial transactions, and business and government secrets. NIST researcher Andrew Regenscheid is working to address this emerging threat, as today’s cryptography, mathematical problems acting as a “lock” to protect data, becomes increasingly vulnerable. The risk is that someone may develop a quantum computer that can reveal sensitive information sent online, Regenscheid explains, emphasizing the urgent need to update encryption and secure computers, information, and internet traffic with post-quantum cryptography.

Cryptography Vulnerability from Quantum Computers

Present-day cryptography relies on mathematical problems so complex that conventional computers struggle to solve them, effectively “locking” sensitive data from unauthorized access. However, the emergence of quantum computing introduces a shift, potentially rendering these established cryptographic methods obsolete. NIST researcher Andrew Regenscheid is proactively addressing this risk.

The core challenge lies in the unique capabilities of quantum computers, which leverage principles of quantum mechanics to perform calculations beyond the reach of classical machines. Regenscheid explains that “computers we have now can’t easily do those math problems to break the encrypted algorithms, but in the future, quantum computers will likely be able to crack these codes.” This potential necessitates a move towards post-quantum cryptography (PQC), a new generation of encryption designed to withstand attacks from quantum computers.

The goal, according to the National Institute of Standards and Technology, is to create mathematical problems so challenging that even a quantum computer cannot solve them. This urgency stems not only from progress in quantum computing but also from a tactic known as “harvest now, decrypt later.” An adversary doesn’t require a functioning quantum computer to begin compromising data; they can intercept and store encrypted information, awaiting future quantum computing power to unlock it.

NIST recently finalized three post-quantum encryption standards, the culmination of a decade-long process involving researchers worldwide. This rigorous evaluation included intense public analysis, uncovering weaknesses in some candidates and reinforcing the security of others. The resulting standards are built upon mathematical problems with over three decades of research supporting their robustness.