Slashdot reader storagedude writes: A quantum computer capable of breaking public-key encryption is likely years away. Unfortunately, so are products that support post-quantum cryptography.
That’s the conclusion of an eSecurity Planet article by Henry Newman. With the second round of NIST’s post-quantum algorithm evaluations — announced last week — expected to take “several years” and the FIPS product validation process backed up, Newman notes that it will be some time before products based on post-quantum standards become available.
“The delay in developing quantum-resistant algorithms is especially troubling given the time it will take to get those products to market,” Newman writes. “It generally takes four to six years with a new standard for a vendor to develop an ASIC to implement the standard, and it then takes time for the vendor to get the product validated, which seems to be taking a troubling amount of time.
“I am not sure that NIST is up to the dual challenge of getting the algorithms out and products validated so that vendors can have products that are available before quantum computers can break current technology. There is a race between quantum technology and NIST vetting algorithms, and at the moment the outcome is looking worrisome.”
And as encrypted data stolen now can be decrypted later, the potential for “harvest now, decrypt later” attacks “is a quantum computing security problem that’s already here.”
