Korea Confronts Quantum 'Harvest Now, Decrypt Later' Risk

Featured Image

The Growing Threat of Quantum Cybersecurity Risks

At the Quantum Campus of Kookmin University in Seongbuk-gu, Seoul, on the 3rd of last month, a significant event took place. The ‘Quantum Security Innovation Meeting,’ organized by the Ministry of Science and ICT, brought together key players from the telecommunications sector and quantum-related industries. One of the presenters, Jo Ji-hoon, an executive at Samsung SDS, highlighted the growing concern around a specific type of cyber threat known as Harvest Now, Decrypt Later (HNDL). According to Jo, this method involves stealing encrypted data now with the intention of decrypting it once quantum computing technology advances. He emphasized that this poses a serious risk to national security and stressed the urgent need for preparation, particularly within the public sector, which holds vast amounts of long-term stored data.

Understanding the HNDL Threat

The HNDL strategy, sometimes referred to as “Steal First, Decrypt Later,” is becoming increasingly relevant as the quantum computing era approaches. Hackers are taking advantage of current network vulnerabilities or infiltrating data storage systems to steal sensitive information such as emails, corporate trade secrets, and military communications. This data is then stored for future decryption when quantum computers become powerful enough to break existing encryption methods. Unlike traditional hacking attempts, HNDL attacks are covert and prolonged, making them difficult to detect. The lack of immediate warning signs, such as system failures or file corruption, means victims may not realize they have been compromised until it's too late.

Experts warn that even the public keys used in today’s asymmetric encryption for e-commerce and elliptic curve cryptography, which underpins Bitcoin, could be vulnerable to quantum computing attacks in the near future. This raises concerns about the security of data that is currently considered safe but could become a target in the coming years.

Preparing for the Quantum Future

To counter these emerging threats, industry experts recommend the use of quantum-resistant cryptography, also known as Post-Quantum Cryptography (PQC). This technology is designed to withstand attacks from even the most advanced quantum computers, offering a crucial layer of protection for the future. The U.S. National Security Agency (NSA) and other organizations emphasize the importance of transitioning to PQC as a top priority for government and public security.

Another promising technology gaining attention is Quantum Key Distribution (QKD), which enables secure exchange of encryption keys using quantum principles. QKD detects and responds to hacking attempts by exchanging photons through specialized quantum optical equipment, making it a robust solution for securing communication in the quantum era.

Experts stress the importance of combining both PQC and QKD technologies to create a comprehensive defense against potential quantum threats. At the recent meeting, Kwak Seung-hwan, CEO of GQT Korea, advocated for the expansion of hybrid applications involving QKD and PQC. He called for active government support and interest in encryption technologies that can neutralize data theft effectively.

Government Initiatives and Future Plans

The government has outlined plans to promote a hybrid model that integrates PQC and QKD quantum security technologies for national core infrastructure by 2030. The focus will initially be on implementing PQC while using QKD as a supplementary measure. The goal is to lay the groundwork for transitioning to a PQC system by 2030 and establish a secure cryptographic framework by 2035.

To achieve these objectives, the government plans to allocate a budget of 3.6 billion Korean won next year to support PQC-QKD hybrid technologies and related initiatives. This investment underscores the importance of preparing for the quantum future and addressing potential cybersecurity challenges proactively.

Some experts argue that just as the release of generative AI marked a significant milestone in artificial intelligence, quantum computing could experience a sudden breakthrough at any time. They suggest that quantum encryption policies should be accelerated to address risks that may arise within the next five to ten years.

Ryu Je-myeong, Second Vice Minister of the Ministry of Science and ICT, emphasized the need for awareness and action regarding quantum security issues. He stated that while these concerns are often overlooked during normal times, they must be addressed when opportunities arise. Ryu highlighted the importance of recognizing quantum security as an imminent danger and urged the government and public institutions to take decisive action.

Comments

Popular posts from this blog

Japan Firms Leverage Satellites and AI to Locate Abandoned Homes for Sale

GEN Nigeria and Others Target Indigenous Firms with New Tech Fees

I Was Healthy Until a Dirty Habit Stopped My Heart