October 30, 2024
By Anjali Kochhar
Chinese researchers recently reported a significant breakthrough, claiming they developed a quantum-based approach to attack public-key encryption systems using D-Wave’s quantum annealing technology. Detailed in the paper Quantum Annealing Public Key Cryptographic Attack Algorithm Based on D-Wave Advantage from the Chinese Journal of Computers, this discovery raises concerns about the future security of widely used encryption methods. The research focused on Substitution-Permutation Network (SPN) algorithms, which underlie the Advanced Encryption Standard (AES), a cornerstone of global data protection.
In their study, the researchers, led by Wang Chao from Shanghai University, utilised a D-Wave quantum computer to challenge smaller-scale encryption algorithms, including Present, Rectangle, and Gift-64 ciphers, by targeting their 22-bit keys.
While this breakthrough involved a smaller key size than real-world standards (typically 128-bit or higher), it demonstrates the potential threat quantum computing could pose to traditional encryption as technology advances. The researchers suggest that their method could be extended to more complex cryptographic systems in the future.
Quantum encryption challenges have spurred experts to evaluate new defences. Mike Parkin, senior engineer at Vulcan Cyber, points out that although quantum computing has not yet reached the level where it can break standard encryption, it is moving in that direction. He emphasises the urgent need for “quantum-safe” cryptographic solutions that can withstand future attacks.
Similarly, Skip Sanzeri, co-founder of QuSecure, highlights that quantum computing, paired with AI advancements, may soon be able to weaken today’s encryption without direct decryption, making proactive security solutions essential.
In response to the growing concerns, organisations like the National Institute of Standards and Technology (NIST) are actively developing quantum-resistant algorithms. Additionally, quantum key distribution (QKD), which uses quantum mechanics to detect any eavesdropping attempts, is being explored as a more secure communication method. Although practical for point-to-point transmissions in high-security contexts, QKD’s infrastructure requirements currently limit its broader application.
Tim Barnett, Chief Information Officer at Bluefin, emphasises the growing concerns around the security of AES-256 encryption in light of advances in quantum computing. He acknowledges that while current quantum computers are not yet capable of breaking AES-256, the potential threat is significant enough that businesses must prepare proactively. Barnett states, “It is only a matter of time until quantum computing is here, and businesses and their infosec teams should plan accordingly.”
As governments and companies prepare for a “harvest now, decrypt later” world, where encrypted data may be stored and decoded once quantum technology advances, experts stress the need for an immediate shift toward stronger encryption protocols to protect against future risks.
About the author
Anjali Kochhar covers cryptocurrency and blockchain stories in India as well as globally. Having been in the field of media and journalism for over three years now, she has developed a sharp news sense and works hard to present information that goes beyond the obvious. She is an avid reader and loves writing on a wide range of subjects.