Cyber IT Supervisory Forum eBook

Internal Use Only

| 25 |

When Is This Happening and Why Worry About it Now?

 While quantum computation is advancing steadily, it could be 10-20 years before a “cryptographic relevant” computer is ready.  But “store and decrypt” strategies make this issue relevant today! – Adversaries gather up data today and store it for future decryption  That’s why White House Issued NSM-10 (Executive Order) in May 2022 – Goal to migrate all Federal civilian agencies to PQC by 2035  Another EO addresses national security systems

© 2024 THE MITRE CORPORATION. ALL RIGHTS RESERVED. APPROVED FOR PUBLIC RELEASE. DISTRIBUTION UNLIMITED 23-01698-01.

Internal Use Only

| 26 |

Three Main Strategies For Addressing Risks

Strengthen current asymmetric crypto

Do nothing

Move to PQC

 Accept risks associated with store and decrypt  May be best option for

 Only way to ensure protection of data and secure authentication of transactions in QC era  Expensive, time-consuming and technically challenging

 Easier to implement that PQC and may buy you time  Doesn’t fundamentally offset risks from QCs

data with short-term shelf life and/or value

© 2024 THE MITRE CORPORATION. ALL RIGHTS RESERVED. APPROVED FOR PUBLIC RELEASE. DISTRIBUTION UNLIMITED 23-01698-01.