Today’s Encryption Will Soon Be Obsolete, Here’s What We Need to Do

The world as we know it has changed, and current geopolitical conflicts are increasingly shifting into cyberspace, which is why cybersecurity is becoming a crucial link in social and economic stability. This was the central message of the cybersecurity conference Span Cyber Security Arena, which brought together global and domestic experts at the Ambassador Hotel in Opatija.

– Cybersecurity is becoming the heart of every company today, and IT professionals must sit at the same table with management, lawyers, and the compliance team. They all need to establish a common language because regulatory pressure is increasing, and the responsibility for security can no longer be delegated to just one function – emphasized Nikola Dujmović, CEO of Span, in the opening part of the conference.

An Ever-Advancing Future of Attacks and Defense

The conference was opened with a lecture by former operative of the U.S. National Security Agency Ira Winkler. Due to innovative espionage simulations that he has helped some of the world’s leading organizations strengthen security, Winkler is often referred to as a modern James Bond, and at this conference, he addressed whether a careless human error could bring down an entire company. Winkler emphasized that security can no longer rely solely on user caution; we need systems that can prevent human error from leading to major incidents.

– Many users neglect basic protective steps, do not regularly update applications and systems, use the same passwords across multiple services, and often do not protect physical access to their devices. For example, if someone uses the same password on different services and that password leaks from one service provider, attackers will try to use it on all other platforms, a phenomenon known as credential stuffing – explained Winkler.

Due to dangers such as phishing messages, fake calls, Bluetooth vulnerabilities, and ransomware, it is important to raise awareness about cyber threats, but this is not a magical solution. Winkler pointed out that no matter how much we invest in education, there will always be a risk of human error. However, greater awareness reduces overall exposure to threats.

– Today, users have access to many technical measures they can apply themselves. Multi-factor authentication, for example, is freely available on platforms like Facebook, Instagram, and Twitter, and it is certainly advisable to activate it. Google offers additional security mechanisms within its applications that are important to configure correctly. The more layers of security we implement, the more resilient we will be to threats – emphasized Winkler.

How to Protect Data from Quantum Computers?

However, in the near future, even that may not be enough, as discussed by Martin Svik, Chief Technology Officer for Northern, Central, and Eastern Europe at IBM. He warned that we must seriously prepare today for a future where quantum computers will become powerful enough to break the encryption that currently protects our bank accounts, emails, and state secrets. The moment when quantum computers break today’s encryption is referred to as Q-Day, but Svik states that ‘there is no public evidence that Q-Day has already occurred.’ This does not mean that Q-Day has happened secretly, but Svik reveals what is currently known about Q-Day.

– At IBM, we know that attackers may already be storing encrypted data to decrypt it later. The risk is increasing, so preparation is key. The concept of ‘store now, decrypt later’ is real, which is why we recommend using quantum-safe algorithms for the most critical data as soon as possible – stated Svik.

When asked whether this means that Q-Day, if it has not yet occurred or when we find out that it has, will return the world to an analog age or whether we will turn to post-quantum technologies, Svik responds that ‘there is no need to hoard typewriters and filing cabinets.’

– We will not be returning to typewriters or paper archiving. The world is already moving towards post-quantum cryptography, and standards like ML-KEM and ML-DSA from the U.S. National Institute of Standards and Technology (NIST) are leading the way – says Svik.

At IBM, they see a significant difference among clients. Some take the situation seriously, while others are still waiting. However, institutions like the U.S. NIST are already recommending that encryption be replaced with post-quantum cryptography by 2030 at the latest. Svik explained that the new post-quantum era of computing will be safer and more innovative.

– We will be able to discover new drugs, develop more durable materials, create new molecules, find optimal solutions in logistics, economics, and elsewhere. The world of artificial intelligence and quantum computing will soon become one world. The exponential computing power of quantum technology will help overcome the energy demands of AI. Therefore, I see many more positive things in the future – concluded Svik.