The potential also holds a threat
The quantum computer not only offers potential, but also entails cyber security challenges, because the quantum computer’s unique computing power will be able to break our existing encryption and checkmate our IT security. Fortunately, quantum-proof encryption is already being developed, and here it’s important for companies to assess which data are particularly sensitive and necessary to protect.
“As an organization, you primarily need to be aware of the threat that quantum computers may pose to your current infrastructure,” says Tobias Gehring, Associate Professor at DTU Physics and co-developer of quantum-proof encryption.
He explains that it is expected to take 10-15 years to change the current encryption infrastructure, and therefore you should not wait too long to get ready.
“As soon as the quantum computer is here, it will be too late to get started, because you risk that hackers will break into your systems. So it’s important to be well prepared to avoid sudden panic reactions,” says Tobias Gehring.
There is a calculation for when you need to start protecting your data. You are at risk if the number of years your data must be protected, combined with the time it takes to implement quantum-proof encryption in your IT systems, is longer than the time it takes before the quantum computer can break currently available encryption. The big question is, of course, when the quantum computer can do this. Every year, the Canadian Global Risk Institute asks 40 leading quantum experts from all over the world about this, and here the majority believe that it will in all likelihood not occur until in 15-20 years.
"So if your data are valuable for a longer period of time, you will have a big problem,” says Tobias Gehring.
Both further away and closer than expectedThey have also grappled with this calculation in Energinet and have come to the conclusion that they must start getting quantum ready immediately. Energinet owns and operates the Danish energy infrastructure and has a small team of three people working with quantum technology.
“It only takes one functional quantum computer to constitute a threat to our systems and the entire critical infrastructure, and we actually don’t know what different military laboratories are working with and how far they have come,” says Alexander Frederiksen, Digital Business Developer at Energinet.
Therefore, Energinet is working to expand its competences in quantum technology in its organization, and, among other collaborations, Energinet participates in DTU’s CryptQ project, where they will test quantum distribution keys such as those Tobias Gehring is developing in their transformer stations.
“It’s an attempt to minimize risk. Our biggest fear is that if someone can break our encryption and listen in on our fibre-based communication, they can collect information over a long period of time,” explains Alexander Frederiksen.
He elaborates that the technology is both further away and closer than they had expected.
“At present, you can already have a cloud-based solution from IBM, where you can use a quantum computer to make some calculations. This would have sounded like science fiction a few years ago,” says Alexander Frederiksen.
Conversely, he had hoped that it could be used to make more complicated calculations than is the case.
