HeadlinesBriefing favicon HeadlinesBriefing.com

Building a Practical Path to Post-Quantum Cryptography

MIT Technology Review •
×

Quantum computing has alternated between breakthrough darling and overhyped promise. Its powerful new capabilities come with a threat to break current cryptography, but for business leaders, post-quantum cryptography (PQC) is a manageable evolution, not a crisis. The transition to quantum-resistant algorithms is neither sudden nor insurmountable. A structured approach exists with trusted partners like Intel, which is already delivering infrastructure to make it possible.

The 'quantum threat' often swings between imminent catastrophe or distant irrelevance. Reality is pragmatic. Quantum computers are specialized accelerators; they will not instantly break every encryption protocol. In late 2024, the Global Risk Institute surveyed experts and found a 50-50 probability that a quantum computer could break a 2048-bit RSA key within 24 hours by 2040. This timeline creates space for deliberate planning. Near-term focus should be on 'harvest now, decrypt later' scenarios for data requiring confidentiality beyond 10 years.

The U.S. government has issued new directives for National Security Systems. Beginning 2027, new acquisitions must support CNSA 2.0 algorithms standardized by NIST. Implementation for new systems is required by 2031, with 100% adoption targeted by 2035. For commercial enterprises, these timelines are signposts for where vendors and auditors are headed. Organizations can borrow this discipline to calibrate risk and investment.

Intel is at the heart of this transition. The Intel Xeon 6 Processor already incorporates quantum-safe memory encryption. Upcoming platforms will extend post-quantum algorithms to firmware, device interconnects, and secure boot. Intel addresses computational overhead through dedicated accelerators like Quick Assist Technology. PQC is not a processor-alone problem; Intel delivers its pieces while collaborating with ecosystem partners. The path forward requires approach PQC as modernization, start with visibility, protect long-lived data first, and design for agility. Leaders who approach this as an engineering evolution will emerge with robust cryptographic foundations.