The New Frontier of Online Security: Quantum-Safe Cryptography

The researchers from the Faculty of Information Technology at Monash University and the Data61 division of CSIRO, Australia's national science agency, have developed the most effective quantum-secure cryptographic algorithm, called "LaV," to enhance the security of end-to-end encryption. This algorithm has the potential to be applied in various fields such as instant messaging services, data privacy, cryptocurrency, and blockchain systems.

End-to-end encryption is a method of encrypting digital communication between a sender and a receiver using encryption keys. Mobile messaging services like WhatsApp and Signal use end-to-end encryption, ensuring that no one, including communication service providers, telecommunications providers, internet service providers, or hackers, can access the information transmitted between the sender and the receiver.

It would take millions of years for a regular computer or even a supercomputer to crack and access data protected by end-to-end encryption. However, a large-scale quantum computer could crack current encryption within minutes and easily retrieve encrypted information.

Dr. Muhammed Esgin, the lead researcher of this collaborative quantum security project, stated that the new cryptographic tool will help make end-to-end encryption more secure, enabling online services to withstand future attacks or interference from the most powerful quantum computers.

"Although end-to-end encryption protocols are already quite mature and used for data and message security in some of the world's most popular instant messaging applications, they are still vulnerable to threats from more complex attacks by quantum computers," said Dr. Esgin.

"This new cryptographic tool can be applied to various mobile applications and online transactions that use end-to-end encryption. It is the first practical algorithm that can strengthen existing systems against quantum computers," he added.

Co-author and quantum security cryptography expert Associate Professor Ron Steinfeld mentioned that current software technologies have not taken into account the emergence of more powerful computing devices.

"In recent years, we have witnessed numerous major cyber attacks and data breaches within Australia, clearly indicating the need for increased focus on cybersecurity and the reduction of vulnerabilities in systems before they are exploited by attackers," said Associate Professor Steinfeld.

"Global governments and standard organizations are preparing for the possibility of large-scale quantum computers that could threaten the security of currently deployed encryption systems. These computers could become a reality within the next decade or even sooner," he added.

"Our past experience has shown that the process of updating encryption algorithms deployed in online systems can also take ten years or longer to complete. This means that we need to urgently start updating our network security infrastructure to use quantum-secure cryptography to ensure our systems are protected before the imminent quantum threat becomes a reality," Associate Professor Steinfeld emphasized.

This research was conducted in collaboration with Dr. Dongxi Liu from CSIRO's Data61 and Dr. Sushmita Ruj, who is currently working at the University of New South Wales. The findings were presented earlier this year at Crypto 2023, the 43rd International Cryptology Conference held in Santa Barbara, USA.

"The National Institute of Standards and Technology in the United States has been standardizing approaches such as encryption and digital signatures to protect the fundamental internet security in a post-quantum world. However, these measures are not sufficient to protect advanced security applications. Our research is filling this gap," said Dr. Liu. "Our new algorithm has been implemented as code by Dr. Raymond Zhao from CSIRO's Data61 and is available as open-source software."

The next step for the research team is to work towards establishing a comprehensive quantum-secure key transparency protocol that can be deployed in encryption applications at any time.