Sectigo unveils platform for post-quantum cryptography prep

Sectigo has announced the launch of Sectigo PQC Labs, a platform aimed at providing a secure environment for organisations to prepare for the transition to post-quantum cryptography.

The platform has been developed in collaboration with Crypto4A, recognised for its quantum-safe Hardware Security Modules (HSMs), which meet the full post-quantum standards set by the National Institute of Standards and Technology (NIST). Sectigo PQC Labs aims to address the urgent need for a scalable and practical platform that facilitates the testing, validation, and support required for organisations to transition safely to quantum-resistant cryptography.

Security and risk management experts from Gartner have noted the necessity for leaders to plan for the transition to post-quantum cryptography. The impact of replacing systems reliant on current cryptographic protocols is expected to be significant. Sectigo PQC Labs allows organisations to test and validate post-quantum cryptographic certificates, enabling them to devise strategies to mitigate potential threats posed by quantum computing capabilities.

Two primary concerns have been highlighted in the current context of quantum threats. "Harvest Now, Decrypt Later" attacks focus on the collection and storage of encrypted data, which could be decrypted once quantum computers overcome existing cryptographic algorithms. Long-lived private digital signatures, crucial for maintaining integrity and authenticity in technologies such as public key infrastructures (PKIs) and various digital records, are at risk if not updated to quantum-resilient standards.

Sectigo's Chief Executive Officer, Kevin Weiss, commented on the significance of quantum threats, stating: "Quantum threats represent a fundamental and existential risk to any organisation wishing to safeguard valuable digital assets." He added, "Sectigo PQC Labs is pioneering the industry as the first certificate testing environment backed by an industry-leading quantum-safe HSM. This cutting-edge capability empowers organisations to test their systems in a secure environment, equipping them with the confidence and foresight needed to seamlessly transition to a post-quantum era. By leveraging Sectigo PQC Labs, organisations can stay decisively ahead of the curve, fortifying their public key infrastructure (PKI) and enhancing their overall security architecture against the challenges of tomorrow."

Crypto4A's role in the project is critical due to its expertise in generating and managing secure cryptographic keys within its HSMs. Bruno Couillard, Chief Executive Officer at Crypto4A, remarked on the collaboration, explaining, "NIST recently stated its 2030 deadline to deprecate today's cryptographic algorithms and banning them entirely by 2035, effectively making today's encryption protocols nearly obsolete." Couillard continued, "As we integrate Crypto4A's HSM with Sectigo's PKI expertise, we are demonstrating our commitment now to deliver organisations a proactive and practical solution to future quantum threats."

Sectigo PQC Labs is currently the only sandbox environment incorporating the full NIST post-quantum standards. Its features include a secure testing space for post-quantum cryptographic assets, educational tools for PQC integration into existing PKIs, and strategies to enhance an organisation's security by adopting a quantum-readiness approach.

As quantum threats loom, organisations are urged to begin their preparations and Sectigo PQC Labs offers a robust environment facilitating this transition, complemented by Sectigo's QUANT readiness strategy. This strategy focuses on low-impact testing of organisations' systems while providing insights and assessments that aid in future planning and adaptation.