To what extent quantum communications technologies (QKD, etc.) be able to make cyber world secure?

Dear Brajesh Mishra,

You may want to review the following info:

What's the best way to protect data and communications against future cracking by quantum computers? Are there any Quantum proof encryption technologies already available?

, BSc Computer Science, University of Melbourne (1981) Ian Heggie

Answered Jul 10, 2019

You cannot truly protect general data storage that can be decoded by one of your systems from being decrypted in the future, you can only make it impractical from a cost and time perspective. Most techniques revolve around making it practically impossible because it requires too much time and effort, or it requires information that is not available.

Practical methods of protecting your data from future decoding by more powerful machines include:

Using the equivalent of random one-time pads with ephemeral or random data and discarding the encryption key after use, so future content analysis cannot use patterns in the data. A contrived example is: agree with your partner that 1 = go out for Chinese, 2 = Italian, 3 = Steak house, 4 = Eat whatever is oldest in the freezer, 5 = I wont be home in time for tea, 6 = unknown. Then each morning the first up throws a dice, makes a note of the number and leaves it on the kitchen table, the other person takes a note of the number. For that day, you communicate what you would like to have for tea by texting (number from key plus number on the dice) mod 6. At the end of day, you burn the piece of paper you noted down the random number on. Someone seeing your text message would not be able to decode what that days preference was (though they may be able to guess based on a few weeks of watching you mostly go out for Chinese, but actually decode it no)

Not collecting the data in the first place for example using a secure credit card processor rather than pass credit card information through your own servers - a hacker can’t find information you never saw in the first place;

Deleting and/or anonymizing data kept for statistics so again information related to specific individuals is not kept;

Have a clear data retention policy which sets how long data is kept for, including the destruction of old backups and follow the agreed process and securely destroy the data when t is out of date. Again, if you don’t have it, it can’t be decoded;

Spending the effort and cost securing data that is commiserate with the cost to you if someone does decodes it within the time span it is sensitive, factor in the probability someone would both attempt to decode the data and then be successful. A lot of confidential data ceases to be significant after a few decades.

Current thoughts on what quantum computers will be able to do vary between 5 Intractable Problems Quantum Computing Will Solve and The promise of quantum computing supremacy is bunk.

Len Leonid Mizrah

Dear Brajesh Mishra,

Here below is some auxiliary info:

, CTO at Serissa Research (2001-present) Lawrence Stewart

Answered Jul 11, 2019

AES with 256-bit keys is pretty good.

See Is AES-256 a post-quantum secure cipher or not?

Attacks are always improving, so there is nothing you can do that will be secure indefinitely. Also, you have to keep the key somewhere, so all encryption does is substitute keeping a small thing secret in exchange for keeping a larger thing secret. If you can keep a key secure somewhere, just put your data there too. Storage devices are pretty small.

If you have nowhere to keep your crypto keys, then no algorithm is going to help.

Brajesh Mishra

Dear Len Leonid Mizrah,

I am grateful to you for giving valuable information related to the question raised by me. You have nicely introduced practical approach to protect data from attacks.

Brajesh Mishra

I would like to add that one of the purpose of my posing this question is to sensitize that the Quantum Communications Technologies may not be able to protect Cyber systems against the attacks which are transmitted as data.

These attacks have no connection with the types of encryption technology (QKD etc.) you use.

I argue that QKD may not help secure the ICT systems from computer viruses and worms and social hacks which primarily exploit systemic deficiencies.

How can I measure MMP-1 protein activity or protein level from liver tissue?

Binary Logistic Generalized Linear Mixed model in SPSS. Is it doable?

Looking for Materials with high thermal expansion coefficient and high temperature resistance?

Guidelines for survey (question type) analysis?

What are the values needed for gabor filter's parameter for cifar10 data?

Can we block unwanted images during the x-ray prediction?

No title

What techniques can I use to determine the miscibility of polymer blends?

Sample dilution for quantitative analysis using ELISA?

The procedure compute?

Is there a powerful system for the security of the systems distributed on IoT systems?

How Relativistic effects is one reason for lanthanide contraction?

How can I integrate a routing protocol in a tiny device (e.g. Raspberry Pi)?

Timeout error!! Processor in the loop (PIL) using STM32F4 Matlab 2018a?

Is there a deep reason for using the squared modulus of the wave function as the probability density of the existence of the particle?

LEDs on Vis Light photo degradation of MB water sol via N doped TiO2 in a mini flume?

What are the patterns of human behavior that lead to COVID-19 infections?

How vulnerable is water and wastewater infrastructure to cyber terrorism in an age of IoT?

What is the optimum time and temperature of blanching and pre-frying potato for frozen fries?

Are there any databases for gene co-expression or expression pattern clustering?