Cryptographic procedures currently in use to secure IT systems are hardly or only with difficulty attackable with currently available, conventional computer technology. This no longer applies to quantum computers. They can attack current security systems due to their novel mode of operation. Therefore, it is urgently necessary to start migrating from classical cryptographic procedures to new procedures that are resistant to quantum computers.
This is especially true for the financial industry with its sensitive data on financial transactions. The QuantumLeap project will use this industry as an example to investigate the necessary adjustments and challenges in the migration to new cryptographic procedures. The project will identify the processes and system components threatened by quantum computers and develop suitable countermeasures, taking into account so-called hybrid procedures and cryptoagility. Subsequently, migration concepts for the concrete conversion to post-quantum cryptography (PQ) procedures will be developed and measures for individual IT system components will be prototypically implemented and tested.
The project also aims to analyse the requirements for applications that arise from the use of PQ procedures and to systematically test applications already in use in the financial sector for compliance with these requirements. In addition, requirements for the use of PQ procedures on industry-specific hardware will be defined and their use tested.
The QuantumLeap project is developing practical solutions that can also serve as a blueprint for the migration of classic cryptographic security procedures to approaches that are resistant to quantum computers for other economic sectors. The results are also being introduced into standardisation processes.
- FZI Forschungszentrum Informatik,
- Fiducia & GAD IT AG,
- SRC Security Research & Consulting GmbH,
- REINER SCT.