Cisco's Vision for Post-Quantum Cryptography: A Secure Future

We are at an inflection point across three vectors:

1. Attackers who are harvesting keys now to decrypt later (HNDL) and unlock sensitive information with the widespread misuse of quantum computing.
2. Quantum computing providers are now out of incubation with plans to scale their data centers and effectively reduce barriers to access these resources.
3. The publication of federal security standards recently released by NIST such as FIPS 203 ML-KEM-1024, provides a cryptographic framework designed to secure data against emerging quantum computing threats, heightening a sense of urgency.

While representative, neither are exploits limited to HNDL, nor are the new standards-based encryption mechanisms static, and certainly, the race to democratize the access to quantum computing at lower costs is not slowing down. These aspects are evolving rapidly along their own trajectories, through public, private, and academic partnerships across the globe.

Traditional encryption methods that have safeguarded digital communications for decades are at risk of being broken. Organizations must prepare with agility and adaptability for this changing landscape. Cisco recognizes this challenge and is proactively preparing for a quantum-secure future. Our commitment is visible through our advancements in research  and open contributions to industry consortiums and standards bodies. Our approach to Post-Quantum Cryptography (PQC) is guided by two key imperatives. Keep reading to learn more.

Migrating Infrastructure to Quantum-Resistant Cryptography

Cisco is committed to ensuring a seamless transition from classical cryptographic methods to quantum-resistant algorithms. Our strategy includes:

• Standards-Based Adoption: We actively collaborate with NIST, IETF, and other industry bodies to validate and integrate standardized PQC algorithms into our solutions, ensuring interoperability and robust security.
• Incremental Deployment: Rather than an overnight overhaul, we advocate for a phased approach, integrating hybrid cryptographic models that combine classical and quantum-safe techniques during the transition period.
• Hardware and Software Readiness: Cisco is evaluating the impact of PQC on both existing and future networking hardware, ensuring that our routers, switches, and security appliances can seamlessly support new cryptographic primitives.
• Zero Trust Integration across Hybrid Cloud: Evolving our cloud-native security solutions and Zero Trust architectures to incorporate quantum-resistant authentication and encryption, protecting sensitive data in transit and at rest.

The Assessment: Readiness and Risk Mitigation

Organizations need to assess their current cryptographic posture and readiness as they begin migrating to PQC. Cisco is helping customers through:

• Cryptographic Inventory and Impact Analysis: Identifying all cryptographic dependencies across an organization’s infrastructure to determine which components require upgrading.
• Quantum Risk Assessment: Evaluating potential vulnerabilities and prioritizing remediation strategies based on risk exposure and regulatory requirements.
• Pilot Testing and Validation: Implementing PQC test environments to measure performance, scalability, and operational impact in preparation for successful and safe full-scale deployment.
• Cryptographic Center of Excellence: Copiloting the needed governance, methods and execution frameworks to continually improve the risk posture and incorporate readiness into all factions of the business.
• Education and Workforce Enablement: Providing training and resources to IT, security, and broader organizational teams, ensuring they are equipped with the knowledge and tools to manage the quantum transition effectively.

The Path Forward

Cisco envisions a future where networks, applications, and data remain secure against emerging quantum threats. This is not only about securing front door access but also protecting the very fabric that runs infrastructure through boot integrity, control plane integrity, and data plane integrity. Our roadmap focuses on proactive adaptation, deep collaboration with industry leaders, and empowering customers with the knowledge and tools necessary to navigate this transition. By taking decisive steps today, we ensure a quantum-secure tomorrow.

Are you ready for the quantum era? Let’s start the journey together.

Share: