Office of the National Cyber Director, The White House的动态

The Cybersecurity and Infrastructure Security Agency is pushing forward on its oversight of federal post-quantum cryptography migration, unveiling a strategy document last week that details how the agency intends to monitor and assess governmentwide progress on the transition. The public release of CISA’s guidance on Friday, required by a 2022 Office of Management and Budget memorandum on migrating to post-quantum cryptography, lays out plans for the deployment of automated cryptography discovery and inventory (ACDI) tools to aid agencies as they work to inventory any IT systems or assets that may contain vulnerable cryptography. https://lnkd.in/g_xHdyXi

The Cybersecurity and Infrastructure Security Agency is pushing forward on its oversight of federal post-quantum cryptography migration, unveiling a strategy document last week that details how the agency intends to monitor and assess governmentwide progress on the transition. The public release of CISA’s guidance on Friday, required by a 2022 Office of Management and Budget memorandum on migrating to post-quantum cryptography, lays out plans for the deployment of automated cryptography discovery and inventory (ACDI) tools to aid agencies as they work to inventory any IT systems or assets that may contain vulnerable cryptography. https://lnkd.in/eTfTkeDw

Quantum computers hold great promise for advancing our digital world. While they offer exciting possibilities, they also create new cybersecurity challenges, especially for encryption. ICYMI: The Office of Management and Budget recently released a report to Congress outlining the government’s strategy to migrate Federal information systems to post-quantum cryptography (PQC). The report addresses vulnerabilities in current cryptographic systems, provides funding estimates for agencies, and details efforts led by the National Institute of Standards and Technology (NIST) to create PQC standards. NIST is leading the international effort to develop and standardize secure algorithms to ensure our information systems remain secure in the quantum era. ?? Learn more: https://lnkd.in/exb3FYkx

NIST is gearing up to launch the first set of encryption algorithms tailored for the potential emergence of a viable quantum computer, signaling the start of a new era in quantum encryption. Experts emphasize the importance for organizations to understand and fortify their cryptographic defenses as they prepare to transition their digital networks to a post-quantum standard. This shift in cybersecurity best practices will be crucial for both public and private sectors as they adapt their network security to meet the demands of evolving algorithmic requirements.

Creating Trust and Replacing Public Key Encryption: The Needham Schroeder Protocol What’s one of the most difficult things to do in cybersecurity? Key management and in the creation of a trust infrastructure. Well, one method we can use was defined in 1978 by Roger Needham and Michael Schroeder. This week, a paper was published that outlined the possible reduction in the security of LWE (Learning With Errors). While it didn’t break Post Quantum Cryptography (PQC) methods, we must be a little worried that lattice cryptography might have a weak point. As Kyber?—?a lattice-based key exchange method?—?is the only current standard for PQC key exchange, NIST is investigating other methods, including BIKE, HQC and McEliece for standardisation. But public key methods are not the only way to negotiate a key. For this, we can use a symmetric key method, and where Bob and Alice can generate a shared encryption key. We then need a KDC (Key Distribution Centre) to enable the sharing. Read more: https://lnkd.in/eDVQCNmz

NIST is gearing up to launch the first set of encryption algorithms tailored for the potential emergence of a viable quantum computer, signaling the start of a new era in quantum encryption. Experts emphasize the importance for organizations to understand and fortify their cryptographic defenses as they prepare to transition their digital networks to a post-quantum standard. This shift in cybersecurity best practices will be crucial for both public and private sectors as they adapt their network security to meet the demands of evolving algorithmic requirements

I’m at AFCEA TechNet Cyber in Baltimore. Bill Layton, Ph.D. who is Technical Director, Cryptographic Solutions for NSA just gave a very insightful talk on Post-Quantum Security. The biggest take aways? 1. No one seems close to a really useful quantum computer right now and it probably won’t happen for a while…but we aren’t sure when it will happen; 2. While we can debate how long it might take to produce a quantum computer useful enough to crack AES 256 encryption, the Federal Government is taking the threat seriously enough to have issued National Security Memorandum 10 mandating certain precautionary steps now; and 3. A quantum computer that is capable enough to crack our current encryption might not ever happen, or not for a long time, but if it does happen it will be “crypto Armageddon.” These things are driving some government entities to take steps now to start what will likely be a multiple years long process to upgrade the appropriate systems. #quantum #encryption #NSA #TechNetCyber

This is part of an ongoing series we've worked on with eShard, reviewing some key research into cryptographic techniques and countermeasures. In this article, we look at how the proposed NIST algorithm, SPHINCS+ (SLH-DSA) holds up against fault injection attacks, based on work carried out by Aymeric Genêt

eShard Expert Review no. 3 – Fault Attacks on SPHINCS+ Co-author Matt Stubbs During our Expert Review series together with eShard, we delve into the dynamic world of cybersecurity to bring you unbiased and detailed analyses from seasoned professionals. In this review, we look back at CHES 2023, the 25th edition, focusing on the presentation given by Aymeric Genêt: “On Protecting SPHINCS+ Against Fault Attacks”. The concept of Genet’s presentation takes advantage of a generic fault injection method that threatens implementations of the coming NIST Post Quantum Cryptography standard SLH-DSA, Stateless Hash-Based Digital Signature Standard FIPS-205 (SPHINCS+). Read More: https://lnkd.in/e_MYnS2M

The future of encryption is quantum-resistant. Are you ready? With the new NIST PQC algorithms now available, GDIT’s Tidal Post-Quantum Cryptography solution is here to support your journey. From assessment to implementation, we’re delivering the tools and expertise needed to secure your data against emerging quantum threats.?https://lnkd.in/eqH63t4r