Draft presented by Chinese experts at global conference shows how to fend off quantum computer attacks on traditional encryption methods. — SCMP
China is expected to play a leading role in creating a “quantum-proof” communication protocol, after scientists from the country presented a design blueprint at a major international conference on telecoms standards.
The protocol aims to help the world fend off potential attacks from quantum computers that could break traditional communication encryption methods.
The draft design, presented at an event in Sweden earlier this month, was unanimously approved, China’s state news agency Xinhua reported on Monday.
This means Chinese scientists will lead the international effort to develop the protocol, the report said.
According to Zhang Lulu, who was part of the Chinese delegation at the conference, the proposal aimed to ensure “post-quantum” security.
“The proposal submitted by Chinese experts aims to provide guidance for the migration of global communication networks to post-quantum cryptography,” Zhang was quoted as saying by Xinhua.
Cryptography refers to the use of coded algorithms for security functions, such as data encryption.
Zhang is secretary general of the WAPI Alliance, China’s first and currently largest domestic industrial alliance focused on network security. Named after “wireless LAN authentication and privacy infrastructure”, the alliance was founded in Beijing in 2006 with at least 20 high-profile telecoms and tech firms.
According to a press release issued by the alliance last Tuesday, the conference, held in Swedish capital Stockholm from Oct 7 to 11, was attended by more than 50 experts from 12 countries including China, as well as representatives from international telecoms and tech liaison bodies.
It was the 47th working group meeting of the global organisation “ISO/IEC JTC1/SC6”, set up in 1964 as part of the International Organisation for Standardisation (ISO) and the International Electrotechnical Commission (IEC). Its purpose is to develop and promote standards for telecoms and information exchange between systems.
The other countries taking part included the United States, Britain, Switzerland, Austria, Japan, South Korea and Canada.
The proposal for the “quantum-proof” protocol was led by China Iwncomm, a WAPI Alliance member firm based in northwestern China.
According to the WAPI press release, it has been approved as a preparatory project, along with seven other new projects involving Chinese experts in various roles.
The South China Morning Post has contacted the ISO/IEC organisation for more details on the proposal.
While full-scale quantum computers are unlikely to replace conventional computers any time soon, the fear remains that the next-generation machines would be able to crack existing cryptographic systems.
The potential threats include risks involving “record now, decrypt later” protocols, where attackers may hack and steal encrypted data today in the hope of decrypting it in the future when quantum computers become mature.
Hence the international focus on post-quantum cryptography (PQC) technology – or the development of cryptographic algorithms capable of withstanding the powerful cryptanalytic attack of a quantum computer.
Dong Mingfu, deputy general manager of Koal Software, a leading Chinese commercial cryptography company, says the fast development of quantum computing technology makes PQC migration an urgent task.
In an interview with mainland media outlet Yicai in April, Dong said early action was the only way to avoid being caught off guard when the quantum era arrived. This was because cryptography upgrades and replacements were very complicated, demanding and costly processes that could not be achieved overnight, he said.
Several countries are already taking action.
Last December, China set up a working group to study the laws, policies and industrial progress relating to quantum-proof cryptography technology. According to publicly available information, the group will also publish research reports and promote the creation of a domestic consensus for action in this field.
In 2022, the US National Security Agency issued a call for organisations of all sizes to migrate to secure encryption by 2035.
A White House report released in July this year outlined the US strategy for transitioning to PQC, a process fraught with challenges and estimated to cost around US$7.1bil between 2025 and 2035. – South China Morning Post
