Quantum Technologies and Cybersecurity: Technology, governance and policy challenges

We are now living through a quantum revolution, with modern technology allowing us to directly manipulate individual quantum systems and fully utilise quantum phenomena. These breakthroughs, a long time in the making, are enabling a new class of technologies based on quantum mechanics. Advances in quantum technologies may drastically change the world as we know it. They are expected to positively impact on many sectors of the global economy, including pharmaceuticals, climate and weather modelling, and financial portfolio management. These benefits come from the computational advantages of problem-solving in totally novel and different ways compared with using traditional computers. At the same time, this new computational power also has a negative side, which explains why quantum technologies are relevant to cybersecurity. While there are some benefits to using quantum technologies to bolster cybersecurity, the most important link is that a large quantum computer could break widely used cryptographic algorithms, breaching confidential data. Most internet applications rely on cryptography to guarantee the confidentiality, authenticity and the integrity of data. However, quantum computers only give a boost on certain classes of mathematical problems, so it is possible to develop cryptography based on mathematical problems that are resistant to attack by quantum computers. Quantum-resistant cryptography can thus help mitigate the threat posed by quantum computers. As the new world of quantum technologies emerges, we need to seize the opportunity to decide how they can help us promote better societies and a more sustainable future. To tackle these issues, CEPS launched a Task Force on Quantum Technologies and Cybersecurity in March 2023. The Task Force’s goal was to draw attention to the technical, ethical, market and governance challenges posed by the intersection of quantum technologies and cybersecurity. The group explored ways to formulate practical guidelines for governments and businesses to ease the adoption of quantum technologies in the EU while addressing the cybersecurity risks associated with the implementation of quantum technologies. These discussions led to policy recommendations for EU institutions, Member States, the private sector and the research community for the development and deployment of quantum-safe technologies.