Quantum computing is a present-day actuality that’s altering cybersecurity in elementary methods. The encryption defending our most delicate knowledge right this moment gained’t stand an opportunity in opposition to highly effective quantum assaults. This implies organizations ought to start adopting post-quantum cryptography (PQC) options now to safe their knowledge in transit. And since wide-area networks (WANs) carry a lot mission-critical knowledge, they’re floor zero. This weblog takes a take a look at key concerns for establishing quantum-safe safety in WAN infrastructure.
The quantum risk panorama and its impression on WAN safety
Our present safety depends on classical encryption, particularly public-key strategies. However these are weak to quantum assaults. Think about a strong cryptographically related quantum laptop (CRQC) designed to interrupt right this moment’s encryption.
This results in a frightening situation known as harvest now, decrypt later (HNDL).
Right here’s the way it works: An attacker secretly copies your encrypted knowledge and the general public key data because it travels throughout your community. When a CRQC turns into obtainable, it’s used to derive the non-public key. With each the general public and quantum-calculated non-public key, the session key can then be unlocked, and all that delicate, beforehand captured knowledge might be decrypted. This implies any knowledge you ship right this moment may very well be uncovered tomorrow.
Your WAN wants quantum-safe safety first
Your WAN is the spine that connects knowledge facilities, department places of work, and cloud environments. It carries your most delicate data, typically knowledge that should keep confidential for years. Securing this site visitors in opposition to quantum threats is important for stopping future breaches and staying compliant.
Right here’s why a WAN-first method to PQC is smart:
- WAN site visitors typically has an extended shelf life for confidentiality. Its journey throughout numerous transports between distant websites and knowledge facilities makes it an excellent goal for HNDL assaults.
- Immediately’s classical encryption strategies, particularly these counting on the problem of factoring massive numbers, are immediately threatened by quantum algorithms like Shor’s.
- International regulatory our bodies are already issuing tips for defending in opposition to quantum-enabled assaults. Starting along with your WAN helps you get forward of compliance necessities and scale back danger sooner.
- Your WAN edge routers are nicely positioned to implement new quantum-safe encryption. Selecting the best infrastructure ensures PQC know-how gives complete protection.
- Fashionable options like SD-WAN, digital non-public community (VPN), and safe entry service edge (SASE) are constructed on robust cryptography. PQC is a pure evolution of this foundational safety.
- The centralized nature of WANs makes them well-suited for rolling out hybrid encryption by mixing outdated and new cryptographic strategies. This agility will simplify your migration to a totally quantum-safe future.
Determine 2. WANs carry delicate, long-lived knowledge and are foundational to safe architectures—making them a precedence for quantum-safe safety as threats and requirements evolveConstructing a complete post-quantum safety (PQS) technique
Publish-quantum safety (PQS) is about upgrading cryptographic algorithms, protocols, and whole programs to resist quantum assaults.
A very efficient PQS answer should be complete, specializing in three key areas:
- Encryption: Protects your knowledge in transit from HNDL assaults.
- Authentication: Ensures solely reliable customers and units can entry your community.
- Safe boot: Helps make sure the integrity and authenticity of your system’s startup course of.
Whereas the precise timeline for a CRQC is unsure, being proactive is essential. An entire PQS technique ought to tackle all these dimensions, defending your knowledge and infrastructure from each angle.
Shield your WAN from quantum assaults
There are two essential approaches to creating your WAN quantum-resistant:
Publish-quantum pre-shared key (PPK): This methodology gives speedy safety in opposition to HNDL assaults. A PPK is a particular key that’s combined along with your classical IPsec session key. Since an attacker can’t seize this PPK, even a CRQC can’t work out the true session key. You possibly can arrange PPKs manually or use a quantum key distribution (QKD) system to acquire them. This protects your important knowledge proper now.
Publish-quantum cryptography ( PQC) algorithms: This methodology entails adopting new, quantum-safe algorithms. Requirements our bodies just like the Nationwide Institute of Requirements and Expertise (NIST) are quickly approving these. For instance:
- ML-KEM (FIPS-203): For quantum-safe key change (encryption)
- ML-DSA (FIPS-204): For quantum-safe digital signatures (authentication)
- LMS (NIST SP 800-208): For guaranteeing the quantum-safe integrity of firmware and software program at a system stage (safe boot)
Cisco 8000 Sequence Safe Routers: Your quantum-safe WAN answer
The Cisco 8000 Sequence Safe Routers are particularly designed for the quantum period, offering strong, quantum-safe WAN connectivity throughout department places of work, campuses, and knowledge facilities.
These routers are constructed with highly effective crypto engines. They will deal with demanding PQC algorithms with out slowing down your community. Excessive-end fashions characteristic the Quantum-Movement Processor (QFP) ASIC whereas department and campus routers use a brand new safe networking processor ASIC. Each are optimized for high-throughput crypto offload.
For speedy quantum-safe encryption utilizing the PPK methodology, Cisco 8000 Sequence Safe Routers assist Safe Key Integration Protocol (SKIP) and RFC 8784, which permit the blending of a pre-shared key into the IKEv2 key change. The PPK may very well be discovered from QKD programs, or if QKD isn’t obtainable, PPKs might be configured regionally within the gadget configuration. This answer allows quantum-safe encryption for IKEv2 IPsec connectivity.
With native PQC options, Cisco 8000 Sequence Safe Routers will assist hybrid encryption. This implies you possibly can mix an present legacy encryption secret with a brand new, NIST-approved quantum-safe methodology’s shared secret inside the similar crypto knowledge airplane. Primarily based on RFC 9370, this hybrid method cryptographically blends a number of shared secrets and techniques to create a stronger session key. The hybrid implementation allows clean migration and lets you implement ML-KEM algorithms as wanted. All public key cryptography options, together with IKEv2 IPsec, SD-WAN, FlexVPN, DMVPN, IKEv2 Cluster Load-balancing, MACsec with EAP-TLS, SSH, and extra, will supply native PQC encryption capabilities on the Cisco 8000 Sequence Safe Routers.
The Cisco 8000 Sequence Safe Routers are foundational for constructing a quantum-safe encryption answer on your community.
Act now for a quantum-safe future
Quantum computing is not a distant risk; it’s right here, demanding speedy motion to guard our digital world. Organizations have to proactively improve their community infrastructure, particularly their WANs, to defend in opposition to quantum assaults.
The transfer to PQC is an pressing step to protect in opposition to threats like HNDL. By prioritizing quantum-safe options on your WAN, you possibly can guarantee long-term knowledge confidentiality, meet regulatory calls for, and keep operational integrity.
Cisco 8000 Sequence Safe Routers are purpose-built for this problem. They provide each speedy safety with PPK and a transparent path to native PQC strategies, securing your knowledge in transit and significant infrastructure.
Investing in quantum-capable safety right this moment with options like Cisco 8000 Sequence Safe Routers is the way you construct resilient, future-proof networks. The time to begin your journey towards quantum-safe networking is now.
