Hosting a Webinar: 'The Approaching Era of Harvest Attacks: Where to Start with PQC Readiness'

Addressing the Approaching Era of Harvest Attacks and Quantum Computing R&D for quantum computing is accelerating globally. Public-key cryptography, such as RSA and ECC, currently widely used, is vulnerable to future decryption by quantum computers. Consequently, governments and standardization organizations are initiating transitions to PQC (Post-Quantum Cryptography).

Recently, concerns have grown regarding 'harvest attacks,' known as 'Harvest Now, Decrypt Later.' This tactic involves attackers collecting and storing encrypted communications or sensitive data that cannot currently be decrypted, with the intention of doing so once quantum computers become practical. While quantum computing may seem distant, enterprises need to begin preparation for cryptographic migration now.

Challenges in Getting Started with PQC Readiness While many enterprises recognize the necessity of PQC, they often face challenges such as: - Not knowing which systems are affected. - Failing to locate all cryptographic assets. - Scattered management of certificates and keys across multiple environments. - Inability to determine where to start preparation for the future.

Furthermore, the environment surrounding cryptographic operations is rapidly changing, including the shortening of TLS certificate lifespans and the need for algorithm migration. Often, while companies understand the need for PQC, they lack a concrete path forward. The key theme is shifting from mere algorithm replacement to comprehensively understanding and managing the entire ecosystem of certificates, keys, and cryptographic assets.

Considering Certificate/Asset Management and Post-Quantum Security Infrastructure This seminar covers how to think about cryptographic foundations for the quantum era, focusing on the perspective of "what preparations should be made now." In the first half, Entrust will present the latest trends in quantum computing and PQC, the background of harvest attacks, and the importance of certificate and cryptographic asset management. In the second half, Asia Information System will discuss centralized management and operational efficiency of certificates, keys, and assets using CSP, as well as post-quantum security foundations utilizing HSMs.

This content is recommended for those who want to use PQC not just as a future technical trend, but as an opportunity to review their company's cryptographic asset management and certificate operations.