Cloud Security Podcast by Google

EP164 Quantum Computing: Understanding the (very serious) Threat and Post-Quantum Cryptography

Mar 18, 2024

Exploring the looming threats of quantum computing on cryptography, the podcast delves into the urgency of adopting post-quantum algorithms. NIST standards, skepticism vs. reality in quantum computing, and proactive data safeguarding measures are discussed. The importance of discerning truth from hype and practical tips on post-quantum cryptography are highlighted.

31:23

Creator website

Episode guests

Jennifer Fernick

AI Summary

AI Chapters

Episode notes

Podcast summary created with Snipd AI

Quick takeaways

Quantum computers pose a serious threat to asymmetric/public key crypto due to their faster algorithms.

NIST's push for post-quantum algorithms signals the industry's need to prepare for quantum threats now.

Deep dives

The Implications of Quantum Computers on Cryptography

Jennifer Fernick, a senior staff security engineer at Google, highlights the potential impact of quantum computers on cryptography in this episode. She discusses the vulnerability of cryptographic systems like RSA, elliptic curves, and other protocols to quantum attacks. If these systems were compromised, it would affect various secure protocols used widely. Fernick emphasizes the need to adopt post-quantum cryptography to resist potential attacks from quantum adversaries.

Introduction

3min

Quantum Computing Threats to Cybersecurity

18min

Exploring Post-Quantum Standards and Quantum Threats

2min

Navigating Skepticism and Reality in Quantum Computing and Cryptography

3min

Importance of Skepticism and Practical Advice on Post-Quantum Cryptography

5min

Guest:

Jennifer Fernick, Senor Staff Security Engineer and UTL, Google

Topics:

Since one of us (!) doesn't have a PhD in quantum mechanics, could you explain what a quantum computer is and how do we know they are on a credible path towards being real threats to cryptography? How soon do we need to worry about this one?
We’ve heard that quantum computers are more of a threat to asymmetric/public key crypto than symmetric crypto. First off, why? And second, what does this difference mean for defenders?
Why (how) are we sure this is coming? Are we mitigating a threat that is perennially 10 years ahead and then vanishes due to some other broad technology change?
What is a post-quantum algorithm anyway? If we’re baking new key exchange crypto into our systems, how confident are we that we are going to be resistant to both quantum and traditional cryptanalysis?
Why does NIST think it's time to be doing the PQC thing now? Where is the rest of the industry on this evolution?
How can a person tell the difference here between reality and snakeoil? I think Anton and I both responded to your initial email with a heavy dose of skepticism, and probably more skepticism than it deserved, so you get the rare on-air apology from both of us!

Resources:

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.

Cloud Security Podcast by Google

EP164 Quantum Computing: Understanding the (very serious) Threat and Post-Quantum Cryptography

Episode guests

Podcast summary created with Snipd AI

Quick takeaways

Deep dives

The Implications of Quantum Computers on Cryptography

Understanding Quantum Computing and Its Threat to Cryptography

Challenges in Developing Post-Quantum Algorithms

Mitigating Risks and Preparing for Post-Quantum Security

Remember Everything You Learn from Podcasts