CSA to roll out guidelines on quantum security from 2025

Tech could have power to break encryption standards of most data by 2030s: Experts

- Krist Boo

Organisations will start getting guidelines from the national Cyber Security Agency (CSA) from 2025 to prepare for the day when hackers start using quantum computers to decrypt stolen and current data.

Quantum computers are rapidly progressing to the point of having enough computational power to break encryption standards underlying most of the world's data and infrastructure today, say experts.

Some warn that that day could come in the early 2030s, despite no quantum computer yet replacing classical computers in practical use.

In response to this advancing threat, the US National Institute of Standards and Technology (NIST) released in August its first three official cryptography standards for the quantum age, with the fourth in the pipeline.

These standards involving algorithms protect secured websites and digital signatures from bad actors, who are already harvesting personal and proprietary data for future decryption and exploitation.

CSA has begun engaging organisations handling highly sensitive and confidential data on adopting quantum-safe cyber defences, it told The Straits Times.

It is prioritising essential service providers such as those in healthcare, telecommunications, finance or public utilities, and select government agencies.

The agency's spokesperson said: "Preparing for migration encompasses quantum-safe risk assessment to identify and prioritise key data assets, and to make an inventory to uncover where cryptographic algorithms are being used and what should be migrated."

The agency is working with experts, the spokesperson said, recognising that transitions to quantum-safe systems will be complex and could take years, with cryptographic assets embedded across devices, networks, servers and systems.