Sectigo, a provider of automated digital identity management and web security solutions, announces the launch of Sectigo Quantum Labs to help organisations prepare for the time when quantum computers render existing standard encryption algorithms obsolete. As part of the company’s quantum initiative, Sectigo has partnered with ISARA Corporation, a provider of crypto-agile quantum-safe security solutions, to provide enterprises with tools for issuing quantum-safe certificates for users, applications, servers, DevOps, code, and more. Sectigo’s Quantum-Safe Certificate Toolkit is the first solution born of this new partnership. Digital signature algorithms In roughly the next decade, advances in quantum computing will eliminate the commercial viability of RSA and ECC (Elliptic Curve Cryptography) encryption and digital signature algorithms, by which time all secrets must be protected by new quantum-resistant algorithms to remain secure. At standard key sizes, RSA and ECC algorithms are effectively impossible to crack using brute force methods on a traditional computer. Quantum computers are able to attack these algorithms many orders of magnitude faster than is possible However, quantum computers are able to attack these algorithms many orders of magnitude faster than is possible with 1/0-gated computing architecture. Over time, that means all secrets protected with RSA or ECC will be exposed to potential theft. Quantum computers therefore threaten all of the world’s communication, commerce, finance, transportation, manufacturing, logistics, healthcare, research, education, and governmental functions. These consequences are so severe that they sometimes are referred to as the Quantum Apocalypse. Valuable industry resource To help computer security experts and IT practitioners understand and prepare for this changing landscape, Sectigo launches Sectigo Quantum Labs. This valuable industry resource kicks off initially to provide enterprises and other certificate users with information to understand the quantum cryptographic landscape and how to ensure continued security through the advent of production quantum computers and beyond. Sectigo has made more than 40 videos, webinars, white papers, podcasts, and other educational assets, available at no cost for anyone to peruse and download. As the cryptographic community standardises on quantum-safe algorithms, Sectigo Quantum Labs will offer the tools, platforms, and guidance necessary to rapidly and correctly phase in this new cryptography across their systems and services. Quantum-resilient PKI solutions “The implementation of any new encryption technology carries risk before it has a chance to mature. The larger focus for organisations should be on building cryptographic agility, so that they’re able to shift to new ciphers as they become available and the impact of quantum capabilities become real,” wrote Eric Hanselman, Chief Analyst, 451 Research, an S&P Company, in a recent report titled, ‘Quantum Computing: Countdown to a Quantum Leap.’ Sectigo also announces its partnership with ISARA Corporation by incorporating quantum-safe cryptographic algorithms from ISARA to create quantum-resilient PKI solutions for deployment in advance of the Quantum Apocalypse. Quantum-safe certificates Sectigo’s Quantum-Safe Certificate Toolkit includes the basic tools needed to create quantum-safe certificates The first solution born of this new partnership, Sectigo’s Quantum-Safe Certificate Toolkit includes the basic tools needed to create quantum-safe certificates for a variety of use cases, along with sample applications showing the use of quantum-safe algorithms. It contains scripts, algorithms, and other information needed for enterprises to issue private-root TLS certificates using candidate quantum-safe cryptography. Developers and security professionals can use these certificates to evaluate, build, and test systems as they prepare to roll out quantum-safe systems. “Our partnership with ISARA provides Sectigo with a wealth of practical understanding of leading quantum-safe candidate algorithms and how to implement them,” said Jason Soroko, CTO of PKI at Sectigo. “Combining our resources enables enterprises to prove their crypto agility and build concrete plans to roll out quantum-safe certificates as soon as they are commercially available.” Certificate automation platforms “Sectigo’s broadly adopted certificate automation platforms are the deployment channel for quantum-safe cryptography,” said Scott Totzke, CEO and Co-Founder at ISARA. “Automation allows IT teams to identify and replace traditional certificates with their quantum-safe equivalents quickly and without error.” “Once we know which algorithms to use in each specific circumstance, CISOs will want the ability to push them out quickly. Sectigo’s and ISARA’s technical capabilities combine to make that possible,” Soroko added.
DigiCert Inc., the global provider of scalable PKI solutions for identity and encryption, Gemalto, a global provider in digital security, and ISARA Corp., the provider of quantum-safe security solutions, announced a partnership to develop advanced quantum-safe digital certificates and secure key management for connected devices commonly referred to as the Internet of Things (IoT). “DigiCert, Gemalto and ISARA are collaborating today to solve tomorrow’s problem of defending connected devices and their networks against the new security threats that the implementation of quantum computers will unleash,” says Deepika Chauhan, Executive VP of Emerging Markets at DigiCert. “The work we’re doing now will ensure that the connected systems that serve as the brains of automobiles, industrial control systems, medical devices, nuclear power plants and other critical infrastructure are safe from those threats in five, 10 and 20 years.” ISARA recognises DigiCert’s track record in advancing many of the certificate innovations in use Secure key storage and management The partnership provides significant advantages for enterprise security teams looking to secure connected devices with lengthy product lifetimes to avoid expensive security retrofitting as quantum computing becomes more prevalent. Organisations can deploy these solutions at any scale, given that DigiCert is already capable of issuing and reliably hosting billions of digital certificates for public trust and private PKI systems. The work of DigiCert with ISARA and Gemalto will enable quantum-resistant certificates with the full capability of hosted, on-premise and hybrid deployment options. DigiCert already works with many companies and consortiums using PKI to authenticate, encrypt and provide integrity for their connected devices. ISARA recognises DigiCert’s track record in advancing many of the certificate innovations in use, as well as its robust certificate management capabilities, and in operating the industry’s most ubiquitous, trusted roots. Gemalto offers secure key storage and management via its SafeNet Hardware Security Modules (HSMs) that integrate with DigiCert APIs to enable large-scale, automated credential issuing for connected devices via an internet-enabled gateway to distribute identity over the cloud. Certificates obtained through this partnership will be enabled with quantum-safe cryptography ahead of any breakthroughs that could eventually lead to quantum computing threatening connected device security. Quantum-safe cryptography Gemalto’s SafeNet Hardware Security Modules act as the root of trust to secure the most sensitive data and applications" “Experts estimate that the dawn of large-scale quantum computing will arrive in the next eight to 10 years, bringing with it the moment when all current public key cryptography can no longer be trusted,” says Scott Totzke, CEO & Co-founder at ISARA. “The work we’re doing today ensures that a fundamental element of the security stack, root certificates, is secure by embedding quantum-safe cryptography. This means that IoT manufacturers and other large organisations will have the solutions and tools they need to prepare for the quantum threat well in advance of that date, keeping confidential information and high-value assets safe.” “Gemalto’s SafeNet Hardware Security Modules act as the root of trust to secure the most sensitive data and applications and protect billions of the digital transactions every day around the world,” said Todd Moore, Senior Vice President for Encryption Products at Gemalto. “This partnership with DigiCert and ISARA will help organisations build secure and future-proof cryptographic operations that can guard against the potential security threats of quantum computing and ensure a more secure world for connected automobiles, devices, machines, smart cities and mission-critical infrastructure.” Quantum computing security Many IoT devices rely on RSA and ECC cryptography to protect the confidentiality, integrity and authenticity of electronic communications. However, NIST and others in the security community predict that within a decade, large-scale quantum computing will break RSA and ECC public key cryptography. DigiCert, Gemalto and ISARA recognise that crypto-agility becomes paramount for manufacturers of connected devices that will be in use a decade or more from now. Efforts to address quantum computing security will support connected device manufacturers and users well into the future To advance the use of reliable quantum-proof certificates, DigiCert, Gemalto and ISARA are collaborating with industry standards bodies that also are pursuing the advancement of post-quantum cryptography such as the Internet Engineering Task Force (IETF). Efforts to address quantum computing security will support connected device manufacturers and users well into the future. Sustainable security management Consider the automobile industry, which is producing more vehicles with semi- and fully-autonomous driving capabilities. A car should last for 20 years or more, and manufacturers will need to ensure that the IoT devices they install will be secure and continue to function even if there is a breakage in the RSA algorithms that would render digital certificates ineffective. “The automotive industry is very focused on long-term and sustainable security management that covers the lifecycle of our vehicles," said SAE Hardware Security Sub-Committee Chair Bill Mazzara. “Crypto agility is one of the key areas we consider and that includes quantum-resistant technology.”