CISA offers post-quantum cryptography roadmap

The Cybersecurity and Infrastructure Security Agency (CISA) has released Preparing Critical Infrastructure for Post-Quantum Cryptography, a guide which provides critical infrastructure and government network owners with essential updates.

The analysis also provides operators with an overview of the potential impacts from quantum computing to National Critical Functions (NCFs) while also offering recommended actions as a means of preparing for the transition.

“While post-quantum computing is expected to produce significant benefits, we must take action now to manage potential risks, including the ability to break public key encryption that U.S. networks rely on to secure sensitive information,” CISA
National Risk Management Center Acting Assistant Director Mona Harrington said. “Critical infrastructure and government leaders must be proactive and begin preparing for the transition to post-quantum cryptography now.”

As a means of ensuring a seamless transition, CISA officials noted they are encouraging critical infrastructure owners to follow the Post-Quantum Cryptography Roadmap along with the guidance in the CISA Preparing Critical Infrastructure for Post-Quantum Cryptography Insight.

The roadmap incorporates actionable steps organizations should take, including conducting an inventory of current cryptographic technologies; creating acquisition policies regarding post-quantum cryptography; and educating the organization’s workforce about the upcoming transition.

CISA spearheads the national effort to understand, manage and reduce risk to the digital and physical infrastructure Americans rely on daily.