News: 1638167464

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Warning: China planning to swipe a bunch of data soon, so quantum computers can decrypt it later

(2021/11/29)


Tech consultancy Booz Allen Hamilton has warned that China will soon plan the theft of high value data, so it can decrypt it once quantum computers break classical encryption.

The firm offers that scenario in a recent report, [1]Chinese Threats In The Quantum Era , that asserts the emerging superpower aspires to surpass US-derived quantum computing tech in the mid-2020s – but probably won’t get there. However, it "could plausibly lead in developing and deploying early quantum-computing use cases" by that timeframe.

One of the use cases China desires is decryption.

[2]

"Encrypted data with intelligence longevity, like biometric markers, covert intelligence officer and source identities, Social Security numbers, and weapons designs, may be increasingly stolen under the expectation that they can eventually be decrypted," the report states.

[3]

[4]

The analysts prognosticate that China will also go after industrial data. "Especially likely targets will tend to align with Chinese economic and national security priorities, such as those developing pharmaceuticals, fertilizers, and high-performance materials," according to the report. China wants that data so that it can be used in quantum computing simulators, to understand how best to put actual quantum computers to work.

[5]A diverse range of processing units linked via interconnects. Sounds familiar? Yes, it's IBM's quantum computing

[6]Computer and data scientists should be as highly regarded as 'warriors' says top UK cybergeneral

[7]Boffins use nuclear radiation to send data wirelessly

The report also suggests that China can't help but be interested in quantum-powered AI, if it emerges, because it will improve the already-extensive analytics and surveillance capabilities deployed in the name of national security.

Those capabilities, according to a [8]report released last Friday by Japan's National Institute for Defence Studies, have seen China start discussions of "intelligentized warfare" defined as follows:

Integrated warfare based on Internet of Things systems that uses intelligent weaponry and equipment and their corresponding methods in the land, sea, air, space, electromagnetic, cyber, and cognitive domains.

The Japanese report states China sees development of AI and quantum computing as essential to help it evolve such capabilities, and suggests significant reorganisation of China's military has already commenced to enable it to prosecute intelligentized warfare. The document suggests China is prioritising domains such as deep-sea warfare and quantum tech, as strength in emerging fields will give China an advantage in future conflicts fought in many different theatres.

Defending against a nation using AI and quantum tech to fight on an electromagnetic battlefield is, thankfully, not a task most Register readers will be required to carry out.

The Booz Allen Hamilton report, however, is aimed at chief information security officers, and offers them some advice about how best to prepare if China's quantum ambitions reach fruition.

[9]

The firm's key recommendations are to start work on an organizational strategy for deploying post-quantum encryption, and to model the risk of China using quantum tech to attack. Staying abreast of quantum computing technology and the changes it can create is also recommended – and if you’re still reading this article, you're doing your part! ®

Get our [10]Tech Resources



[1] https://www.boozallen.com/expertise/analytics/quantum-computing/chinese-cyber-threats-in-the-quantum-era.html

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YaSy7DsFw5v4l7VALnL8QwAAAAE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YaSy7DsFw5v4l7VALnL8QwAAAAE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YaSy7DsFw5v4l7VALnL8QwAAAAE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.theregister.com/2021/11/16/ibms_quantum_system/

[6] https://www.theregister.com/2021/09/16/dsei_compsci_prestige_warriors_sanders_speech/

[7] https://www.theregister.com/2021/11/15/wireless_information_transfer_with_fast_neutrons/

[8] http://www.nids.mod.go.jp/publication/chinareport/pdf/china_report_EN_web_2022_A01.pdf

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/aiml&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YaSy7DsFw5v4l7VALnL8QwAAAAE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[10] https://whitepapers.theregister.com/



Phones Sheridan

Would the counter to this be to create giga/tera/peta-bytes of encrypted junk files left in suitably mis-secured servers connected to the internet. You may not be able to stop the Chinese gov from hacking and obtaining data but you can make the indefinite storage of it pretty hard. Also if it’s encrypted gibberish, would that slow down the decryption of it? After all if an unencrypted file appears to be random data, then it hasn’t been decrypted properly, so back to the code breakers it goes, wasting more resources. A sort of data Cold War.

Ken Hagan

An interesting question: when you are brute-forcing something, how do you know when to stop?

Anonymous Coward

When you've tried all possibilities — it's like trying all combinations on a luggage lock.

"When you've tried all possibilities"

Mike 137

Or sooner if the result seems to make sense. I vaguely remember that some researchers reported an ability to encrypt in a way that could yield more than one apprently valid decrypt. Does anyone here have a reference to this?

Re: "When you've tried all possibilities"

Charles 9

It's a defining feature of one-time pads. Given the right key, you can literally get anything out within the size limit.

A very good question

Anonymous Coward

Essentially by looking for cues that you know in the answer - hopefully I've posted the right youtube thing (I have no association with this, just found it interesting), but it explains how you can start pruning your decryption search until you get something meaningful.

https://www.youtube.com/watch?v=RzWB5jL5RX0

Doctor Syntax

Rather than actually generate and store, just simulate a file system and generate the random stuff when an intruder "reads" it. The cost of storage then falls entirely on the intruder. For bonus points simulate an entire network. Let them keep "discovering" another server full of stuff.

Quantum computing and decryption

Dinanziame

I know that quantum computers are theoretically able to decrypt some encryption methods, because they can factorize large numbers. But I thought there were different encryption methods which didn't use large number factorization, was it elliptic functions? Doesn't that mean that we could switch to those methods and quantum computers would stop being such a bogeyman for encryption?

How close are quantum computers to be of any use anyway? Because they often seem to be predicted for right after fusion reactors, or whenever half life 3 is released, whichever happens last...

Re: Quantum computing and decryption

druck

It nice to know the Chinese have bought in to the quantum snake oil, jut like everyone else.

Re: Quantum computing and decryption

vtcodger

"It nice to know the Chinese have bought in to the quantum snake oil, jut like everyone else."

You've got a point there. A bit of skepticism is probably appropriate. On the other hand, China (and US and EU and ...) probably can't afford not to assume that quantum or other advanced decryption techniques might become available at some future time.

Re: Quantum computing and decryption

DJO

How close are quantum computers to be of any use anyway

Depend on what you want to do. Quantum computing uses Shor's algorithm to factorise integers.

The current highest number factorised this way is 21, they tried to factorise 35 but failed because of accumulating errors.

So if your requirements are factorising small numbers then they are ready to go. If you actually want to do something useful then probably not for a long time, if ever.

Of course if something better and more fault tolerant than Shor's comes along then it may all change overnight.

Re: Quantum computing and decryption

Charles 9

That's just what we know, though. Don't rule out black projects.

Re: Quantum computing and decryption

Tomato42

Shor's algorithm works for attacking elliptic curves, as used in ECDHE or ECDSA, just fine.

You'd need to switch to supersingular elliptic curves to be secure against quantum computers. But the current most likely winner is lattice based crypto.

Encrypt data... errr quantumly

I should coco

What if its encrypted using quantum encryption then is it not possible to tell if its being hacked because of entanglement?

Once the middle kingdom has the quantum computing capability its a fair assumption that uncle sam will too.

Re: Encrypt data... errr quantumly

Anonymous Coward

We can't assume that America will be able to keep up - China has way more engineers because they're working hard to give everyone with the ability the opportunity to learn for free, while America's increasingly expensive education system means only those with existing wealth or willing to commit to a lifetime of debt can afford to train.

Even turning everything around now would not be enough to catch up by this point- China has already won the 21st century from a technology perspective.

Post quantum cryptography

Anonymous Coward

Yep!

https://en.wikipedia.org/wiki/Post-quantum_cryptography

We're a long long way from having decent quantum computers, they're still in the research phase now. Workable qubits are in the hundreds at the moment and I've heard an estimate that you need about a million for anything useful. And you still need to 'program' them, which is non-trivial. There may be a breakthrough in tech, but like you say, future quantum computers should be powered by fusion!

And its standard practice to harvest data and hope to decrypt it in the future, although you're making your haystack bigger with a potentially rusty needle in it.

Why would they bother?

CrackedNoggin

All they have to do is put on embargo on exports to Amazon and the West will be brought to it's knees.

If they did it today it would be like murdering Santa - goodby Christmas!

breakfast

Given most of the hardware the rest of the world uses is made in China, "oh that? yeah we deciphered it with quantums" might make for a good cover if anyone found them using data that should have been securely encrypted without giving away any spy-in-the-hardware type systems they have slipped into people's chips, motherboards, memory, graphics cards etc &co. A side benefit being that it would make it look like they had way more quantums than anyone else which would probably America to work much harder on that, knowing that if the US makes any big breakthroughs that are practical to turn into products they'd probably have them manufactured in China.

cantankerous swineherd

so we can safely assume the Americans have this program well in hand.

Take nothing for granted is prudent advice and a timely reminder to be prepared for shocks/surprises

amanfromMars 1

so we can safely assume the Americans have this program well in hand. ..... cantankerous swineherd

A question to ponder and wonder at, for it may be considered too awesome to answer correctly and truthfully, is does China [and therefore the East] lead in that other emerged quantum domain/those other developing fields with applications exercising and advanced beta testing Deep See Ware fare ..... with IT forks into AIMindfulness .... or does the West assume and presume to be a primary leader worth following via mass multi media tales in that field too ‽ .

Chris G

Mostly the dangers that Booz Allen are reporting on are a list of all of China's naughtyness over the last few months that have been reworked to sound as though they can relate to 'quantum'.

Quantum computers, fusion, flying cars and robo-butlers will all be possible around the same time (pick a repeating number i.e. decade, twentyfive years, blah blah.

I imagine that anyone who has come by some unencryptable data has stuck it in a drawer marked quantum.

Meh

batfink

TLAs all round the world have been hoovering up raw data for decades in the hope that sooner or later they'll be able to decrypt it (and hope it's still useful by then).

Adding "Quantum!" to this doesn't make it news.

RHAPSODY in Glue!