- The United Kingdom Government has published new guidelines for migration after the quanto
- The timeline describes a full migration target for 2031
- SMEs should find this simpler due to updated orientation
The United Kingdom Government has published its guidelines on the protection of the technical systems of future quantum computers.
The National Cyber Security Center established a schedule so that the United Kingdom industry and government agencies continue with key dates, first of all, by 2028 all organizations must have a defined set of migration objectives and an initial plan, and they should have carried out a “complete discovery exercise” to evaluate the infrastructure and determine what should be updated to the computing after the quanta.
By 2031, organizations must carry out migration activities of the highest priority and have a refined plan for a complete road map to complete the change. Finally, by 2035, migration must be completed for all systems, services and products.
Large -scale threats
The United Kingdom government described the movement as a “change of mass technology that will take several years”, but why is migration needed?
The Government describes that the threat to the cryptography of the future “quantum computers tolerant and tolerant” is now understood, and that the technical systems must evolve to reflect this.
“Quantum computers can efficiently solve the hard mathematical problems on which asymmetric public key cryptography (PKC) is based to protect our networks today,” confirm the guidelines.
“The main risk mitigation that this poses is to migrate to cryptography after which (PQC); cryptography based on mathematical problems that quantum computers cannot solve efficiently.”
The report warns that the total financial cost of PQC migration could be “significant”, so organizations must budget accordingly, even for “preparatory activities”, as well as for migration itself.
For SMEs, the PQC must be easier and without problems, since the services will generally be updated by suppliers, but in the case of specialized software, replacements or updates compatible with PQC must be identified and implemented in line with the previous schedule.
