Projects

Cybersecurity and Combinatorial Optimization

Quantum computing to improve cybersecurity

Funding: ICSC Innovation Funds

Enabling technology: Knowledge Graph, Quantum computing

Sustainable Development Goals

The project involves simulating a quantum attack on RSA-encrypted communication. Prerequisites for the project include acquiring knowledge and experience in preventing “data breaches.” The project involves studying innovative methodologies to understand the limits and vectors of future attacks. The goal is to demonstrate that quantum computers can decrypt a message protected by RSA symmetric/asymmetric key encryption, using Quantum Annealing and Variational Quantum Factoring (VQF) algorithm approaches.

National Centre for HPC, Big Data and Quantum Computing (ICSC), a project funded by the European Union – NextGenerationEU – and by Italy’s National Recovery and Resilience Plan (PNRR) – Mission 4, Component 2.

Objectives

The project aims to assess the resilience of existing cryptographic systems against emerging threats posed by the power of quantum computing. By designing and implementing algorithms capable of attacking the vulnerabilities of cryptographic systems based on classical algorithms, the goal is to evaluate the security of real communications and real stored data.

Attention will therefore be focused mainly on schemes based on factorization problems (e.g., RSA) and discrete logarithm problems (e.g., Diffie-Hellman key exchange), which rely on certain encryption keys appropriate for messages during transmission from a sender to a recipient.

Another objective concerns data breaches: the project aims to assess the resistance of classical systems to the decryption of encrypted data. This can be done by implementing a simplified version of a common algorithm, such as the Advanced Encryption Standard (AES) or Triple Data Encryption Standard (3DES).

Initial challenge

The initial challenge that gave rise to the project is the potential threat that quantum computers pose to classical cryptographic systems. The most advanced research on quantum computers suggests they could break many of the public-key cryptographic systems currently in use, such as the RSA protocol. Shor’s algorithm has shown that a quantum computer could efficiently solve integer factorization, thereby undermining the security of such systems. By simulating a quantum attack on encrypted communication, the project seeks to assess the resilience of existing cryptographic systems to these emerging threats.

Solution

The approach devised for the solution includes:

Research and analysis: Conducting an in-depth analysis of the current state of quantum computing and its implications for cybersecurity. Identifying existing algorithms and assessing their quantum attack capability.
Algorithm design and implementation: Developing algorithms that show improvements over previous quantum and classical algorithms. Implementing these algorithms in software models and evaluating their performance and weaknesses.
Prototyping and testing: Building demonstrators or software prototypes to validate the proposed algorithms. Evaluating their efficiency and scalability.

Benefits

The main benefit is the development of a more robust defense system against quantum cyber threats. The project will contribute to policy discussions and the development of standards in the field of quantum cybersecurity, offering recommendations and guidance to industry stakeholders on how to protect critical infrastructure, sensitive data, and privacy in the post-quantum era.

From a practical standpoint, the project helps bridge the gap between theoretical research and real-world applications, exploring practical aspects such as the implementation and testing of quantum-resistant algorithms in real-world scenarios. This proactive approach to quantum threats gives organizations a competitive advantage, enhancing their reputation and creating new business opportunities by demonstrating their commitment to protecting customer data.

Finally, the project has academic significance in the field of quantum cybersecurity, offering the opportunity to publish research and present findings at international conferences and workshops.

IFAB’s role

IFAB took part in the project in an operational capacity, contributing to the management and coordination of activities across the different development phases. This involvement covered both organizational aspects and liaison among the parties involved, ensuring consistency between the activities carried out and the project’s objectives. Through this contribution, IFAB helped ensure the project’s proper execution and the delivery of the expected results, making its management expertise available in support of the entire process.