AIVD, TNO and CWI publish handbook on migration to quantum-secure communications

Experts consider the chance small but real that by 2030 quantum computers will be powerful enough to break current cryptographic standards. Therefore, it is important that organizations start migrating to a quantum-safe environment soon. On 4 April 2023, the General Intelligence and Security Service (AIVD), TNO and Centrum Wiskunde & Informatica (CWI) published a handbook for the migration to quantum-secure communications. The handbook is intended for the Dutch government, businesses, vital sectors and knowledge institutions that work with important information that is being encrypted, such as trade secrets. Alexandra van Huffelen, State Secretary for Kingdom Relations and Digitalization, was presented with the first copy during a meeting in The Hague on the migration to post-quantum cryptography.

Migration requires customization

The PQC Migration Handbook provides guidance on how to properly prepare and execute the transition to quantum-secure communication using post-quantum cryptography (PQC).PQC is a collection of approved encryption methods that, unlike current encryption, cannot be broken by quantum computers. The handbook helps organizations to identify risks and provides concrete steps to work on a migration strategy. There is not one strategy for all organizations, as not every organization has the same interests and ICT structure. For example, because organizations work with different types of data or have a different degree of confidentiality.

State Secretary Van Huffelen: "It is of great importance that the Netherlands prepares for the threat posed by the quantum computer to our secure information and communication. This handbook offers government and industry important support in this regard. It is great to see that the cooperation between knowledge institutions leads to the publication of this handbook."

Threat of quantum computers real

Cryptography is used to protect data that should not be readable by others. Experts consider the chance small but real that quantum computers will be powerful enough by 2030 to break current cryptographic standards. Therefore, it is important to take appropriate measures for sensitive information in a timely manner.

Until then, there are also risks to current cryptography. The data that is currently being sent or stored in encrypted form can be intercepted and deciphered at a later time using a quantum computer. Data that will still be sensitive in 2030 and must remain secret should therefore be encrypted as soon as possible with cryptography that protects against attacks from a quantum computer. Also read the AIVD brochure on the threat of quantum computers, in Dutch: Bereid je voor op de dreiging van quantumcomputers | Publicatie | AIVD .

The PQC Migration Handbook (in English) and the PQC-migratiehandboek (in Dutch) can be downloaded.

This is a joint press release from AIVD, CWI and TNO.

See also the PQC Migration Handbook (in Dutch) on the AIVD website.