Connects decision-makers and solutions creators to what's next in quantum computing

Is Telecom Security Ready for the Quantum Computing Threat?

Communication service providers must adopt quantum-safe systems based on PQC algorithms today to avoid critical vulnerabilities

Srinivas Bhattiprolu, Head of advanced consulting services at Nokia

December 9, 2024

3 Min Read
A cellphone mast
Gettty Images

Quantum computing, once a futuristic concept, is rapidly becoming a pressing reality. A 2023 report from the Global Risk Institute warned that RSA-2048 — a widely used encryption standard — has an 11% chance of becoming ineffective within five years, rising to 31% in ten years. As we enter 2025, the question is no longer if quantum computing will impact telecom security, but when.

By leveraging quantum physics, quantum computing performs calculations far beyond classical supercomputers, making encryption methods like RSA and ECC vulnerable to becoming obsolete almost overnight.

Understanding the Quantum Threat to Telecom

For communication service providers (CSPs), the stakes are particularly high. Networks carry vast amounts of sensitive data, from subscriber information and payment details to device configurations and infrastructure control. Quantum computers could exploit vulnerabilities in several ways:

  • Harvest-Now, Decrypt-Later (HNDL): Cybercriminals might steal encrypted data today, waiting until quantum computers can decrypt it in the future.

  • Digital signature forgery: Forging digital signatures can falsify legal documents, undermining trust in digital transactions and records.

  • Key management attacks: Exploiting key management vulnerabilities can enable attackers to compromise long-term stored data, exposing sensitive information.

Related:Sparking Quantum Innovation

These risks demand that CSPs take proactive steps to ensure their networks remain secure.

Preparing for the Quantum Era With Post-Quantum Cryptography (PQC)

A crucial part of mitigating these risks is the adoption of post-quantum cryptography (PQC) — new cryptographic algorithms designed to withstand quantum attacks. Global efforts, led by bodies like the National Institute of Standards and Technology (NIST), have identified several PQC algorithms that will become the backbone of future encryption standards. These standards are essential for securing internet, network and data encryption in the quantum era.

Key standards include FIPS 203, the leading standard for general encryption, based on the CRYSTALS-Kyber algorithm; FIPS 204, the primary standard for safeguarding digital signatures, based on the CRYSTALS-Dilithium algorithm; and FIPS 205, a digital signature backup standard, based on Sphincs+, which uses a different mathematical approach to ensure security if FIPS 204 faces vulnerabilities. For CSPs, adopting these standards is critical to future-proofing networks and ensuring data security.

Why CSPs Must Act Now

CSPs need to adopt quantum-safe systems based on PQC algorithms today to avoid critical vulnerabilities. A proactive approach will help ensure:

Related:Countdown to Q-Day

  • Business continuity: A quantum-based attack could result in financial losses, reputational harm and regulatory penalties.

  • Regulatory compliance: Governments and industry bodies are already setting timelines for quantum-safe transitions. Staying ahead of these mandates will be crucial.

  • Market leadership: Early adopters of quantum-safe technology will gain a competitive advantage, offering customers enhanced security and trust.

Steps Toward Quantum Readiness

Preparing for quantum threats involves more than just deploying new algorithms and requires a multi-layered approach, including:

  • Awareness and training: Educating teams on quantum risks ensures informed decision-making.

  • Risk audits and CBOM: Identifying cryptographic vulnerabilities and establishing a Cryptographic Bill of Materials (CBOM) to document cryptographic assets and manage certificates effectively.

  • Strategic planning: Developing and executing a roadmap for PQC adoption ensures an orderly transition.

  • Continuous updates: Security is a moving target. Regular testing and updates will be critical as quantum capabilities evolve.

A Quantum-Safe Future

The transition to a quantum-safe world is not just a technological challenge; it’s a strategic imperative. For CSPs, embracing post-quantum cryptography today is key — not only to secure networks and protect customer trust but also to lead in the future of cybersecurity.

Waiting until "Q-Day" arrives is not an option. The time to act is now.

About the Author

Srinivas Bhattiprolu

Head of advanced consulting services at Nokia, Nokia

As head of advanced consulting services at Nokia, Srinivas Bhattiprolu is primarily responsible for driving the Cloud and Network services portfolio business along with business consulting business for the company.

Srinivas is a result-oriented IT professional with over 22 years of techno-managerial experience. Srinivas has cultivated a strong understanding of the security domain, specializing in IoT Consulting and IoT Security, building solution blueprints and the corresponding use cases for communication service providers. He also possesses knowledge and working experience in various domains such as telecommunications, banking, financial services and industrial process control.

Sign Up for the Newsletter
The most up-to-date news and insights into the latest emerging technologies ... delivered right to your inbox!

You May Also Like