Partnership for IoT Security in the Era of Quantum Computing
Quantum-Safe encryption to become possible through collaboration of three companies
DigiCert announced on the 4th that it has entered into a partnership with Gemalto and Isara for IoT security in the era of quantum computing.

Through this partnership, the three companies will develop enhanced quantum-safe digital certificates and security key management technologies for connected devices.

Deepika Chauhan, Executive Vice President of New Markets at DigiCert, said, “DigiCert, Gemalto, and Isaara have agreed to collaborate to address the future challenge of protecting connected devices and related networks against new security threats triggered by the implementation of quantum computers,” adding, “We will help ensure that connected systems, which will serve as the brains of automobiles, industrial control systems (ICS), medical devices, nuclear power plants, and other critical infrastructure, remain safe from these security threats five, ten, and twenty years from now.”

This partnership will provide significant benefits to corporate security departments considering secure, long-life connected devices to avoid costly security rebuilds with the advent of quantum computing. Because DigiCert can already issue and reliably host billions of digital certificates in public and private PKI systems, enterprises can adopt these solutions without scale constraints. Through the partnership, the three companies plan to support quantum-resistant certificates that can be freely deployed in hosted, on-premises, or hybrid modes.

DigiCert is already collaborating with numerous companies and consortia that provide authentication, encryption, and integrity for connected devices using PKI. ISARA, having led the innovation of many certificates used today, highly values DigiCert’s proven capabilities, including its excellent certificate management skills and operation of the industry’s most widely used and trusted root. Gemalto provides secure key storage and management through SafeNet Hardware Security Modules (HSMs) integrated with DigiCert APIs, enabling automated credential issuance for connected devices at scale via Internet Access Gateways that deploy accounts in cloud environments. The certificates developed through this partnership are expected to enable Quantum-Safe encryption, predating quantum computing technology that threatens connected device security.

Scott Totzke, Founder and CEO of Isara, stated, “Experts predict that the era of large-scale quantum computing will begin within the next 8 to 10 years, and the moment will come when all existing public-key cryptography can no longer be trusted.” He added, “The work Isara is currently pursuing is to ensure the security of root certificates, a core element of the security stack, by incorporating Quantum-Safe encryption.” "In other words, IoT manufacturers and large enterprises will be able to securely protect confidential information and high-value assets by proactively equipping themselves with the necessary solutions and tools to prepare for quantum threats," it was stated.

Todd Moore, Senior Vice President of Cryptographic Products at Gemalto, said, “Gemalto’s SafeNet Hardware Security Modules play a key role in trust, keeping the most sensitive data and applications safe and protecting billions of digital transactions happening around the world every day. Our partnership with DigiCert and Isara will help enterprises build secure cryptographic operations applicable to the future to protect against potential security threats from quantum computing, and will ensure a safer world for connected cars, devices, machines, smart cities, and mission-critical infrastructure.”

Today, many IoT devices rely on RSA and ECC encryption to protect the confidentiality, integrity, and reliability of electronic communications. However, security organizations, including the National Institute of Standards and Technology (NIST), predict that large-scale quantum computing will render RSA and ECC public-key encryption ineffective within the next decade. DigiCert, Gemalto, and Isara believe that crypto-agility will be of paramount importance to manufacturers of connected devices for use in the next decade or beyond.

The three companies are collaborating with industry standards organizations, such as the Internet Engineering Task Force (IETF), that are driving the development of post-quantum cryptography to promote the use of trusted certificates that are available on a quantum basis. Current efforts to address quantum computing security will support the future of connected device manufacturers and users.

For example, looking at the automotive industry, which is producing more vehicles equipped with semi-autonomous and fully autonomous driving capabilities, since cars are required to have a lifespan of over 20 years, manufacturers must ensure that the security of installed IoT devices is maintained and they continue to operate even if the RSA algorithm is compromised and today's digital certificates become invalid.

“The automotive industry is focusing on long-term, sustainable security management that spans the vehicle lifecycle,” said Bill Mazzara, Chairman of the SAE Hardware Security Subcommittee. “Cryptographic agility, including quantum-resistant technology, is one of the key areas we are focusing on.”