97 Things Every Application Security Professional Should Know

Chapter 42. Quantum-Safe Encryption Algorithms

Rakesh Kulkarni

In the realm of application security, asymmetric encryption plays a pivotal role in securing applications through SSL/TLS, digital signatures, and secure key exchange—ensuring the integrity and confidentiality of data. The foundation of this security lies in the presumption that cryptographic keys are both random and resistant to guessing. However, the advent of quantum computing poses a booming threat, particularly to widely adopted asymmetric algorithms like RSA and elliptic curve cryptography (ECC). As quantum capabilities advance, security experts and AppSec professionals should proactively look for innovative solutions for quantum-resistant cryptography such as quantum random number generators (QRNGs).

QRNGs generate truly random numbers that are unpredictable and nonreproducible, leveraging the inherent uncertainty in quantum states. Incorporating QRNG in asymmetric key generation significantly bolsters the security against computational attacks, including threats from powerful quantum computers.

As many of the Fortune 500 companies are investing in building quantum computing capabilities. It is evident that we will be seeing exponential growth in quantum computers as well as the adoption of the technology. The concept of decrypt later quantum technology suggests that, once powerful enough, quantum computers ...