Quantum Safe Security Workgroup Presentation. Battelle / ID Quantique / QuantumCTek CSA EMEA Congress, Rome 19 November 2014

Transcription

1 Quantum Safe Security Workgroup Presentation Battelle / ID Quantique / QuantumCTek CSA EMEA Congress, Rome 19 November 2014

2 ID Quantique Photon Counters Services Quantum Random Number Generators Technology Quantum Safe Crypto Swiss company, founded 2001, based in Geneva Spin-off of University of Geneva, Group of Applied Physics Quantum Safe cryptography: High performance network encryption up to 100Gbps Quantum Key Distribution Quantum key Generation

3 Battelle Solving What Matters Most Serving a Broad Range of Clients With a Long History of Innovation

4 3-layers of quantum-safe security implementation Applications Quantum Security Service Service Platforms Infrastructures: Wide Area Quantum Communication Network Chinese company, founded 2009, based in Hefei Spin-off of University of Science and Technology of China (USTC) Provides of quantum multi-protocol network security products and services Forges quantum industry Cloud Security Alliance, 2014.

5 ETSI Quantum Safe White Paper Some problems that are considered difficult or impossible to solve using conventional computation platforms become fairly trivial for a quantum computer. Any information that has been encrypted, or will be encrypted using many of the industry s state-of-the-art cryptosystems based on computational hardness is now under threat of both eavesdropping and attack by future adversaries who have access to quantum computation. Without quantum-safe encryption, everything that has been transmitted, or will ever be transmitted, over a network is vulnerable to eavesdropping and public disclosure. The ETSI Quantum-Safe Whitepaper 2014, ISBN Cloud Security Alliance, 2014.

6 HACKING IS EASY (and everyone is doing it)

7

8 Optical Tapping for under 500 Eavesdropper Optical fiber bending & coupling Buy an optical tap legally online Emitter Receiver

9 Social Engineering A telecom company outsources the laying of new optical fibers for a bank to a maintenance team who do not understand the security issues. The naked optical fiber is accessible..and the detailed layout of the fiber network & the name of the bank is clearly visible for future hacking attempts

10 THE THREAT is to Public-Key CRYPTOGRAPHY

11 Public Key Cryptography: Threats Alice Message Public Key Scrambled Message Message Private Key Bob Different Keys What are the 2 prime factors of : Hint :

12 Public Key Cryptography: Threats Alice Message Public Key Scrambled Message Message Private Key Bob Different Keys = *

13 Public Key Cryptography: Threats All of the following will render Public Key Cryptography vulnerable Alice Message Public Key Scrambled Message Message Private Key Bob Different Keys Use mathematical «one-way» functions Theoretical Progress Vulnerable to x =? A x B = Increase in Computing Power Quantum Computers

14 Quantum Computing in Research America is building a quantum computer for cryptanalysis According to Snowden this is a major NSA initiative called Penetrating Hard Targets China Prepares for Quantum Age Source: The importance of building a quantum computer is such that the Chinese government funded 90 quantum related projects last year through the National Natural Science Foundation of China. Lazaridis (RIM cofounder) has invested $250 million+ into quantum computing at Waterloo Quantum Valley D-Wave raised funds from Jeff Bezos (Amazon), InQTel (NSA investment arm) and sells to Lockheed Martin, NASA Google is building a quantum computer IBM investing $3 billion in quantum computing

15 Comparison of conventional and quantum security levels of some popular ciphers Algorithm Key Length Effective Key Strength / Security Level Conventional Computing Quantum Computing RSA bits 80 bits 0 bits RSA bits 112 bits 0 bits ECC bits 128 bits 0 bits ECC bits 256 bits 0 bits AES bits 128 bits 64 bits AES bits 256 bits 128 bits The ETSI Quantum-Safe Whitepaper 2014, ISBN When sufficiently powerful quantum computers are available, then all data protected with keys passed over the internet will be vulnerable Cloud Security Alliance, 2014.

16 Practical considerations how urgent? It depends on the category of information and how long it needs to be protected x: how many years we need our encryption to be secure y: how many years it will take us to make our IT infrastructure quantum-safe z: how many years before a large-scale quantum computer will be built Y X Z Secrets Divulged Time The value of x must be carefully considered: What are the practical consequences of a certain category of information becoming public knowledge after x number of years? The goal of the Quantum Safe Security Working Group is to shorten the time before our networks are safe Cloud Security Alliance, 2014.

17 THE SOLUTION: Quantum-safe Cryptography Cloud Security Alliance, 2014.

18 The Solution: Quantum-Safe Cryptographic Infrastructure «Post-quantum» Cryptography Classical codes deployable without quantum technologies Believed/hoped to be secure against quantum computer attacks of the future Quantum Key Distribution Quantum codes requiring some quantum technologies currently available Typically no computational + assumptions and thus known to be secure against quantum attacks Both sets of cryptographic tools can work together to form a quantum-safe cryptographic infrastructure

19 First SOLUTION: Post-quantum Cryptography

20 Post-Quantum Cryptography Public-key cryptographic systems based upon problems with no quantum algorithm known to break these systems more efficiently than classical computer architectures Approaches go back to the 1970s and 1980s Digital signatures based on One-Way Hash functions (e.g. XMSS) Digital signatures based on Multivariate Polynomial Equations (Rainbow signature scheme) Encryption and signature schemes based on Error Correcting Coding (e.g. McEliece 78, CFS 01) Encryption and signature schemes based on Lattices (e.g. NTRU 98, BLISS 13) Performance Most of these systems are comparably fast or even faster than conventional crypto systems Larger key sizes and/or larger cypher texts and signatures required Security (bits) Decryption/ Signing Time Encryption/ Verification Time Public-Key Size (bits) Secret-Key Size (bits) Cypher/ Signature Size (bits) RSA ,072 24,578 3,072 NTRU ,939 1,398 4,939 McEliece ,537,000 64,861 2,860 Rainbow , , BLISS ,000 2,000 5,600 The ETSI Quantum-Safe Whitepaper 2014, ISBN Cloud Security Alliance, 2014.

21 Second SOLUTION: Quantum Mechanics for Secure Encryption Keys

22 Change in Paradigm Network Encryption Key Management High speed cryptosystem implementation (typically AES) Crypto Key Lifecycle

23 THE SOLUTION (2A): Quantum Random Number Generation (QRNG)

24 Quantum Randomness Physical Random Number Generator exploiting a phenomenon described by quantum physics Detectors Truly random Photons Semi-transparent Mirror Advantages Speed Source of photons Simple process that can be modeled influence of environment can be ruled out Live monitoring of elementary components possible

25 Quantum Random Number Generator

26 THE SOLUTION (2B): Quantum Key Distribution (QKD)

27 Quantum Cryptography "0" "1" "1" "0" Fragile! Alice Message Scrambled Message Message Symmetric Cryptography Secret Key Secret Key Bob Identical keys Key Exchange?!?

28 Quantum-Enabled Network Encryption Transparent Layer 2 Encryption AES-256 in CFC and CTR modes Up to 100Gbps Multiprotocol (Ethernet, Fibre Channel) + Provably secure key distribution: QKD Distilled key distribution rate: 1000 bps over 25km/6dB Range: 100km xwdm Local Area Network Quantum Channel Dark Fiber Local Area Network

29 Today s Depoyments of QKD Hybrid solutions: Conventional encryption on wide area network QKD on DRC and backbone links (WAN) Classical Encryption Device Quantum Encryption Solution MAN/SAN

30 Conclusions Call To Actions Cloud Security Alliance, 2014.

31 Next Steps Join the QSS working group Attend or contribute to the work we will do White papers Webminars Conferences Spread the word Come talk to us tomorrow morning Table in Breakfast Area STAY CALM and QUANTUM SAFE ENCRYPT Cloud Security Alliance, 2014.

32 It s There! Cloud Security Alliance, 2014.