Quantum Cybersecurity

The talk starts with the quantum landscape, covering computing, sensing and communications, and argues that large quantum computers would undermine much of today's public-key encryption. The speaker stresses the stakes for finance and critical infrastructure and points to heavy government investment abroad as a reason for urgency.

The middle section reviews cryptography basics, including the gap between schemes proven secure against any computer and those only believed secure against known ones. It explains why true randomness matters, why public-key infrastructure designed decades ago fits poorly with modern cloud networks, and why captured traffic can be stored now and decrypted later. Examples of flawed hardware tokens, compromised certificates and supply chain problems illustrate how long-lived weaknesses persist. Quantum key distribution and a cloud-based quantum entropy approach are compared, with their cost and speed trade-offs.

The closing argument is that organizations should begin migrating to the post-quantum standards now, since legacy systems take years to replace and federal contracts will require compliance. Practical advice includes staying crypto-agile, demanding verifiable end-to-end encryption from vendors, and assigning staff to follow the standards work. Audience questions covered the transmission speed limits of key distribution and how ephemeral keys reduce exposure.