Cryptography underpins much of our digital security. Whether it's for protecting sensitive customer data, securing online transactions or supporting compliance with regulatory standards, cryptographic systems play a key role in safeguarding information.

However, the rise of quantum computing is expected to pose significant challenges to the effectiveness of the cryptography we know and use today. A cryptographically relevant quantum computer (CRQC) could break many of the cryptographic protocols we currently rely on, including those used for securing emails, transactions and personal data.

While quantum computers capable of breaking current cryptographic systems are still in the early stages of development, with schemes, such as harvest now, decrypt later sensitive data with longer shelf life—such as financial data, medical records and personal information are at higher risk, even today.

Building cryptographic inventory

Researchers are working on standards and protocols to ensure a smooth transition. NIST has published the first 3 in an expected broader set of new cryptographic algorithms that are designed to provide security against quantum attacks. The transition to quantum-resistant cryptography will be a multiyear effort. So, it is essential that businesses create a strategy, understand their risks and start planning their migration journey now.

One of the first few steps towards quantum-safe migration will require organizations to build a cryptographic inventory; a critical component of any organization’s cybersecurity strategy. It can help organization assess if their cryptographic assets are properly managed, secured and compliant with regulations. With a detailed cryptographic inventory, businesses can maintain awareness of their security posture and can have the opportunity to address security vulnerabilities and respond to incidents rather swiftly.

IBM Z Crypto Discovery and Inventory (IBM zCDI) can help accelerate your quantum-safe journey

IBM zCDI is designed to simplify how clients discover cryptographic assets on the Z platform. By analyzing and consolidating relevant crypto statistics from several data sources IBM zCDI can aid with building a crypto inventory. Clients can leverage this inventory to track and manage crypto assets efficiently. In addition, documenting and tracking cryptographic usage data via IBM zCDI will allow businesses to provide a clear and transparent record for audits, thereby helping them maintain their compliance posture so they can keep up to date with industry regulations and standards. This new solution is built to simplify how businesses assess their systems for potential weaknesses and aid with remediation plans so they can accelerate their migration to post quantum cryptography.

While quantum risks may seem like a distant threat, based on our survey, organizations anticipate that, given their current level of quantum preparedness, it will take them 12 years to fully implement quantum-safe standards across their operations. It is crucial to begin planning the migration process immediately. Organization will need to perform a holistic risk assessment, gain a clear understanding of all the affected areas and dependencies to build a prioritized roadmap.  Business critical application that are most vulnerable to security threats will need to be secured ahead of others.  With enhanced observability and detailed insights from IBM zCDI, organizations can make educated decisions on prioritization and build a robust migration roadmap. We believe IBM zCDI should be an integral part of post quantum strategy on IBM Z.

Learn More :

1.     Register for the IBM Z Crypto Discovery & Inventory webinar

2.     Review IBM Z Crypto Discovery & Inventory webpage

3.     Study Transitioning to Quantum-Safe Cryptography on IBM Redbook

4.     Review the Quantum-safe security on IBM Z webpage

5.     Explore NIST’s post-quantum cryptography standards