The looming threat of quantum computing isn’t a distant science fiction scenario; it’s a present-day concern driving a significant push for “quantum-resistant” security measures. That was the central message delivered by Professor Liljana Babinkostova of the Department of Mathematics at the 23rd Annual Boise Information Systems Security Conference, held March 10 at Boise State University. The conference, hosted by the Boise Chapter of the Information Systems Security Association, brought together cybersecurity professionals from Idaho’s Treasure Valley and beyond to address the evolving landscape of digital threats.
Babinkostova’s keynote address focused on the urgent need to prepare for a future where current encryption methods could be rendered obsolete by the advent of powerful quantum computers. Even as still under development, these machines possess the theoretical capability to break many of the cryptographic algorithms that currently safeguard sensitive data, from financial transactions to government communications. The transition to quantum-resistant cryptography is a complex undertaking, and Babinkostova highlighted the substantial technical hurdles involved in updating existing digital infrastructure.
The Boise Information Systems Security Association (BoiseISSA) serves as the primary professional organization for cybersecurity practitioners in the region, offering training, networking opportunities, and advocacy for the field. The conference website provides details on speakers, sessions, and sponsors.
The Quantum Threat: A Race Against Time
The development of quantum computers poses a fundamental challenge to modern cryptography. Current encryption standards, such as RSA and ECC, rely on the mathematical difficulty of certain problems for their security. Quantum algorithms, like Shor’s algorithm, can efficiently solve these problems, effectively breaking these encryption methods. The National Institute of Standards and Technology (NIST) has been working for years to identify and standardize new cryptographic algorithms that are resistant to attacks from both classical and quantum computers. In July 2022, NIST announced the first four algorithms selected for standardization, marking a crucial step in the transition process.
However, simply having new algorithms isn’t enough. Babinkostova emphasized that transitioning to these new standards requires a comprehensive overhaul of existing systems. This includes identifying all instances of vulnerable cryptography within an organization’s infrastructure – a task often more challenging than it appears. “Many organizations don’t have a complete inventory of where cryptography is used,” she explained during the conference, according to attendees. “It’s not just about updating software; it’s about understanding the dependencies and potential impacts of those changes.”
Practical Challenges in Implementation
Babinkostova wasn’t alone in discussing the practical difficulties of preparing for a post-quantum world. She also participated in a panel discussion titled “Preparing for a Post‑Quantum World: What Organizations Are Really Doing in 2026,” alongside local chief information security officers and policy experts. The panel delved into the real-world lessons learned from organizations attempting to implement quantum-resistant cryptography.
Key takeaways from the panel included the unexpected complexity of cryptographic inventories, the discovery of hidden system dependencies, and the difficulties of thorough testing. Organizations often find that cryptography is embedded in unexpected places, making a comprehensive assessment a significant undertaking. Updating cryptographic libraries can introduce compatibility issues with existing systems, requiring extensive testing and potential modifications. The panel also highlighted a common disconnect between organizational expectations and the technical realities of implementing these changes.
One recurring theme was the need for proactive planning and investment. Waiting until quantum computers become a widespread threat is not a viable strategy. The transition to quantum-resistant cryptography is a long-term process that requires significant resources and expertise. Organizations need to start assessing their vulnerabilities, developing implementation plans, and investing in the necessary tools and training now.
Beyond Technology: Policy and Collaboration
The shift to quantum-resistant security isn’t solely a technical problem; it also requires policy changes and increased collaboration. Governments and regulatory bodies need to establish clear guidelines and standards for quantum-resistant cryptography. International cooperation is also essential, as the threat of quantum computing transcends national borders.
The Cybersecurity and Infrastructure Security Agency (CISA) within the Department of Homeland Security is actively working to prepare the nation for the quantum threat. CISA’s quantum security page provides resources and guidance for organizations looking to assess their vulnerabilities and implement quantum-resistant cryptography.
Babinkostova’s presentation and participation in the Boise conference underscore the growing urgency of this issue. The transition to a post-quantum world will be a complex and challenging undertaking, but it’s one that must be addressed to ensure the continued security of our digital infrastructure. The next major milestone in this process will be the continued rollout of NIST’s standardized quantum-resistant algorithms and the development of practical implementation guidelines.
What are your thoughts on the quantum threat? Share your comments below, and let’s continue the conversation.
Worth a look
