Quantum computers use the principles of quantum physics to solve certain problems far faster than regular computers. One of those problems is breaking the math that protects much of today’s internet security.

What’s at risk

Much of today’s online security relies on public-key cryptography (such as RSA and elliptic curve methods) to protect:

– Web connections (HTTPS)

– VPNs

– Digital signatures and certificates

– Secure email and software updates

A sufficiently powerful quantum computer could break these methods. Encryption that protects stored data with symmetric methods, like AES with a strong key size, is much less affected.

Why act before such a computer exists

“Harvest now, decrypt later.” Attackers can capture encrypted data today and store it until quantum computers can unlock it. If your data needs to stay confidential for ten or twenty years, such as medical, legal, financial, or government records, that risk exists now.

How soon?

Nobody knows exactly. Many experts expect cryptographically relevant quantum computers sometime in the 2030s, but the timeline is uncertain, and governments are planning ahead.

The response: post-quantum cryptography (PQC)

In August 2024, the U.S. National Institute of Standards and Technology (NIST) published its first post-quantum cryptography standards. These are new algorithms, designed to run on ordinary computers, that resist quantum attacks. Governments and major vendors are now adding them to browsers, operating systems, and cloud services.

What a small business can do

– Stay informed, but don’t panic

– Keep software and systems updated, so you receive post-quantum support as vendors add it

– Ask suppliers about their quantum-readiness plans

– Identify long-lived sensitive data that needs protection for many years

– Avoid unsupported, end-of-life systems that can never be upgraded

Sources: NIST post-quantum cryptography standards (2024).

DBR Soft can help you assess which of your data needs long-term protection. Contact us for more information.