Microsoft Progressing Towards Quantum-Safe Technology
After launching its Quantum Safe Programme (QSP) two years ago, Microsoft is now actively incorporating post-quantum cryptography (PQC) algorithms into its foundational security components. The tech giant aims to ensure the resilience of its systems and servers against future quantum computers breaking current encryption protocols. Microsoft has set a goal to have its core services quantum-safe by 2029, well ahead of most government targets.
Microsoft Azure CTO Mark Russinovich and Microsoft Security CTO Michal Braverman-Blumenstyk emphasize the importance of preparing for scalable quantum computing now through a multiyear transformation. They urge organizations to upgrade to modern cryptographic architectures and embrace crypto-agility to modernize their security practices.
Key Points of Microsoft’s QSP Strategy:
- Updating Microsoft’s services, supply chain, and ecosystem to be quantum-safe
- Supporting customers, partners, and ecosystems in achieving quantum-safe technology
- Promoting global research, standards, and solutions in quantum security
Recent Developments
Microsoft has integrated PQC algorithms into components like SymCrypt, the main cryptographic library used by Windows, Azure, and Office 365. This library now supports quantum-safe algorithms recommended by NIST. Additionally, Microsoft is enhancing its key exchange mechanisms to address cyber threats like Harvest Now Decrypt Later attacks.
Furthermore, Microsoft is updating services such as Entra authentication, key and secret management, and signing services to integrate post-quantum cryptography. The company plans to extend quantum-safe technology to Windows, Azure, Office 365, and other services to ensure overall ecosystem security.
Alignment with Government Plans
While Microsoft’s QSP strategy aligns primarily with US government requirements, the company is also monitoring quantum-safe initiatives from other countries like Australia, Canada, the EU, Japan, and the UK. By staying ahead of the curve in quantum security, Microsoft aims to safeguard its systems and services for the future.
