17 stories
Show: Summaries / Headlines only
Managing Director Chia Der Jiun said MAS will issue supervisory expectations later in 2026, with progressive timelines for cryptographic inventories, migration priorities, and the capabilities to migrate. MAS published a consultation paper with proposed timelines on November 6.
Absolute promises, theorems without their conditions, quantum in a product's name, and post-quantum labels without an algorithm or certificate recur in security pitches. Each can be checked against a public standard, certificate, agency assessment, or proof.
Owners of designated critical systems should file migration plans with CSA by March 31, 2027. CSA describes the handbook that contains the dates as informational and not mandatory, and says detailed guidance is still in development.
Coordinated by LuxQuanta, the six-member QUARTERNEXT consortium plans 48 months of work on continuous-variable QKD equipment and intends to provide its hardware and software for testing at Nostradamus, the EU's QKD evaluation effort.
Shannon proved in 1949 that perfect secrecy for arbitrary data needs a random key at least as long as the data, used once. A product sold as perfectly secret with a shorter or reused key fails that test.
National security systems must support the NSA's CNSA 2.0 algorithms. The department ruled out quantum key distribution for quantum resistance and will count solutions as fully post-quantum only with post-quantum authentication.
In measurement-device-independent QKD, an untrusted relay makes every measurement, so the detector attacks demonstrated on commercial systems no longer work. Researchers have still taken full keys through a flawed transmitter. Users also give up key rate.
