Post-Quantum Cryptography: A Major Challenge for Digital Security

In a world where cyberattacks are increasingly sophisticated, cryptography plays a fundamental role in protecting sensitive data, communications, and critical infrastructures. Currently, businesses and governments rely on algorithms such as RSA (Rivest-Shamir-Adleman), ECC (Elliptic Curve Cryptography), and AES (Advanced Encryption Standard) to ensure the security of exchanges. However, the emergence of quantum computing challenges these standards.

Quantum computers have the potential to break classical cryptographic algorithms through algorithms such as Shor’s algorithm, making many current infrastructures vulnerable. While machines capable of executing these attacks on a large scale do not yet exist, current research and advances show that this reality is rapidly approaching.

Post-Quantum Cryptography: The Response from ANSSI and the EU

Unlike the United States, which has adopted a more directive approach through the NSA and NIST (which selected several post-quantum algorithms for standardization in July 2022), the European Union favors a progressive and collaborative approach. In April 2024, the European Commission published a recommendation encouraging Member States to prepare for the post-quantum transition, but without yet imposing binding regulations or a specific deadline.

In France, ANSSI plays a key role in supporting this transition. The agency recommends progressive adoption, favoring hybrid solutions combining classical and post-quantum cryptography. This approach aims to minimize operational risks while ensuring increased resilience against future quantum threats.

Post-Quantum Algorithms: FIPS 203, 204, and 205

To address the challenges posed by quantum computing, new cryptographic standards have been defined by NIST under the references FIPS 203, 204, and 205. These algorithms were selected for their robustness against quantum attacks and their compatibility with existing infrastructures. Their progressive adoption is essential to ensure the transition to enhanced digital security, while guaranteeing interoperability with current systems.

• FIPS 203 (Kyber): A public-key encryption algorithm designed to replace RSA and ECC in secure communications.
• FIPS 204 (Dilithium): A digital signature algorithm that offers strong resistance to quantum attacks while being performant.
• FIPS 205 (SPHINCS+): A hash-based signature algorithm, offering a reliable alternative in case of vulnerability in approaches based on Euclidean lattices.

The integration of these new standards into existing infrastructures is a priority for businesses and governments seeking to protect themselves against future quantum threats. (NIST Source)

The United States: A More Directive Approach

Unlike Europe, the United States has a faster and more prescriptive approach. As early as 2022, the NSA established a roadmap requiring government agencies to migrate to NIST-approved algorithms before 2035. This approach structures the transition timeline and commits businesses to rapidly invest in implementing post-quantum solutions.

Example of Progress: Google’s Willow

A notable example of advances in the quantum field is Willow, a processor developed by Google to test and advance post-quantum algorithms. This technology is part of an approach aimed at securing digital infrastructures against the new computing capabilities that quantum computers will offer. These efforts demonstrate that major players are already taking steps to adapt to the challenges of post-quantum cryptography. (Google Willow Source)

IBM’s Quantum Roadmap: A Reality in 2027

IBM, another key player in the quantum field, has published an ambitious roadmap that plans to reach a critical phase of “scale quantum computing” by 2027. This milestone represents a turning point in the industrialization of quantum technologies and underscores the growing importance of post-quantum cryptography. It therefore becomes essential for organizations to follow these advances and progressively adapt their infrastructures. (IBM Quantum Roadmap Source)

How to Follow the Evolution Toward Post-Quantum Cryptography?

1. Analyze Current Infrastructure: Identify dependencies on traditional cryptographic algorithms. 2. Explore Hybrid Approaches: Test solutions combining current and post-quantum cryptography, as recommended by ANSSI. 3. Monitor Regulatory Evolution: While the EU and France have not yet established a binding framework, directives and advances must be closely monitored. 4. Familiarize Yourself with Innovations: Initiatives such as Google’s Willow or IBM’s roadmap show that progress is rapid and requires active technology monitoring.

Anticipating the Transition

Quantum computing is progressing at a sustained pace, and the question of post-quantum cryptography is becoming increasingly pressing. While Europe is adopting a progressive and adaptable transition, the United States is already structuring its migration with a more directive approach. For digital stakeholders, the challenge is not only to follow this evolution, but to anticipate changes in order to ensure optimal long-term security of infrastructures.

The post-quantum era is approaching: it is time to stay informed and explore solutions to ensure the security of communications and data in this new paradigm.