Biden Signs Quantum Computing Security Act; Cisco Bets on Quantum Key Distribution

On December 21, local time, President Joe Biden signed the Quantum Computing Cybersecurity Preparedness Act [1] into law, making it official and encouraging federal government agencies to adopt encryption technologies that are not affected by quantum computing. Originally sponsored by Representatives Ro Khanna and Nancy Mace, the bill passed the House in July 2022 and passed the Senate earlier this month.

The bill requires the Office of Management and Budget (OMB) to prioritize the procurement and migration of federal agencies to IT systems with quantum cryptography resistance. The bill also requires the White House to develop guidance for federal agencies to evaluate critical systems one year after the National Institute of Standards and Technology (NIST) releases its planned quantum code-resistant (PQC) standard.

The bill requires OMB to submit an annual report to Congress that includes strategies on how to address quantum cryptography-resistant risks across the government. In a Nov. 18 memo, the White House asked federal agencies to provide a list of assets containing cryptographic systems that can be cracked by quantum computers by May 4 of next year. Meanwhile, the National Security Agency (NSA) issued guidance in September that set out requirements for owners and operators of national security systems to begin using quantum-resistant algorithms by 2035. In an advisory note at the time, the intelligence agency recommended that vendors begin preparing for the new technology requirements, but acknowledged that some quantum-resistant algorithms were not yet approved for use.

Maggie Hassan, who pushed for the bill, said in an earlier statement, "Data breaches from quantum computing exploits are a serious national security concern. America's adversaries are looking for any vulnerabilities in our cybersecurity systems to threaten our infrastructure, data and security. It is critical that we be prepared in case any adversary uses this incredibly advanced and emerging technology against our nation."

On the same day, Biden also signed the SBA Cyber Awareness Act, a bill that requires the U.S. Small Business Administration (SBA) to submit an annual report on the agency's cybersecurity.

In fact, in addition to the U.S. government, leading technology companies are also placing a high priority on quantum security, such as Cisco, except th阿e tech giant prefers quantum key distribution (QKD).

Liz Centoni, Cisco's chief strategy officer, expects QKD to gain momentum next year as organizations and governments grapple with post-quantum security threats. She said [2], "While post-quantum cryptography (PQC) is a potentially expedient solution, it is unclear whether PQC schemes will be broken in the future. qkd will be particularly impactful because it avoids distributing keys over insecure channels. in 2023, as we prepare for a post-quantum world, we will see a macro trend in data centers, IoT, autonomous systems, and 6G with QKD."

Cisco has made great strides in quantum research and development, said Ramana Kompella, a distinguished engineer and head of research in Cisco's Emerging Technologies and Incubation Group. The research team is focused on a wide range of research areas, such as PQC and QKD, to ensure the security of next-generation digital infrastructure. the PQC solution is applicable to classical networks, while QKD requires quantum networks. Cisco is working on converged network infrastructures for classical and quantum communications that can support QKD in the future.

Cisco works closely with academic researchers from leading universities around the world and supports their research by providing funding and other resources. In the past year, Cisco has invested in more than a dozen quantum projects at universities in the U.S., U.K. and EU. It also recently hosted the second Cisco Quantum Summit, a two-day online event designed to bring together experts to discuss progress in building the quantum Internet.

Finally, as part of Cisco's quantum research and development efforts, they are currently accepting research proposals aimed at conducting research on different areas of quantum hardware, software and applications.

Reference：

[1]https://www.fedscoop.com/biden-signs-quantum-computing-cybersecurity-act-into-law/

[2]https://www.sdxcentral.com/articles/interview/cisco-bets-on-quantum-key-distribution/2022/12/