Cybersecurity In-Depth: Getting answers to questions about IT security threats and best practices from trusted cybersecurity professionals and industry experts.
Knowing where your digital certificates are is just the start.
Question: How should my security department begin future-proofing for quantum computing?
JD Kilgallin, senior integration engineer at Keyfactor: To future-proof enterprise networks and systems against threats posed by quantum computing, security teams should be prepared to take quick action. At the very least, this requires knowing where your digital certificates are, what cryptographic algorithms their keys are using and what quantum computing means for them, and what systems need to trust those certificates and might experience an outage if the certificate and its chain suddenly change.
It also requires the ability to quickly coordinate changes between entity certificates and the trust anchors of other endpoints that rely on those certificates. Administrators should keep a careful inventory of these keys and certificates and employ automated techniques to securely deploy updates en masse. This can be a large undertaking that administrators should begin preparing for sooner rather than later.
In the meantime, security teams should ensure that all sensitive communications that rely on digital certificates to protect communication confidentiality are employing ciphers that offer forward secrecy, so that stored communications are not disclosed when the key is compromised in the future by quantum computers.
Related Content:
About the Author(s)
You May Also Like
Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024