Chinese researchers break RSA encryption with a quantum computer – Source: www.csoonline.com

In a potentially alarming development for global cybersecurity, Chinese researchers have unveiled a method using D-Wave’s quantum annealing systems to crack classic encryption, potentially accelerating the timeline for when quantum computers could pose a real threat to widely used cryptographic systems.

Published in the Chinese Journal of Computers under the title “Quantum Annealing Public Key Cryptographic Attack Algorithm Based on D-Wave Advantage,” the paper outlined how D-Wave’s machines were used to break RSA encryption and attack symmetric encryption systems, raising serious questions about the future of cybersecurity.

The research team, led by Wang Chao from Shanghai University, found that D-Wave’s quantum computers can optimize problem-solving in a way that makes it possible to attack encryption methods such as RSA.

 “Using the D-Wave Advantage, we successfully factored a 22-bit RSA integer, demonstrating the potential for quantum machines to tackle cryptographic problems,” the researchers wrote in the paper.

The study highlights how quantum annealing can turn cryptographic attacks into combinatorial optimization problems, making them easier to solve.

“This is the first time that a real quantum computer has posed a substantial threat to multiple full-scale SPN structured algorithms in use today,” the researchers noted, referring to widely used encryption methods based on the Substitution-Permutation Network (SPN) structure.

[ Related: The CISO’s guide to establishing quantum resilience ]

The researchers didn’t just stop at RSA. They also attacked algorithms crucial to the Advanced Encryption Standard (AES), including Present, Rectangle, and the Gift-64 block cipher.

“Our findings show that D-Wave’s quantum technology can efficiently target encryption systems that protect sensitive information globally,” they stated in their paper.

“Many cryptographic algorithms that enterprises rely on today, such as RSA and ECC, are based on mathematical problems that are computationally difficult for classical computers to solve efficiently,” said Prabhjyot Kaur, senior analyst at Everest Group. “However, the advent of quantum computing threatens the security of these algorithms. The need for robust quantum-safe or post-quantum cryptographic solutions becomes increasingly evident as quantum computing advances.”

What does this mean for cybersecurity?

The implications of this research are significant. Experts have long believed that quantum computers could eventually break today’s encryption, but this study suggests that the timeline for such threats may be much shorter than expected.

“The advancement of quantum computers can seriously threaten data security and privacy for various enterprises, affecting fundamental principles such as confidentiality, integrity, and authentication,” Kaur added. “This makes it essential to reassess the security of these cryptographic methods.”

The team pointed out that data being encrypted today could be at risk if adversaries are stealing it with the intention of decrypting it in the future when quantum technology advances. “Organizations need to reconsider how they secure their data as quantum attacks become a real possibility,” they warned.

The need for quantum-safe encryption

Many companies are already working on “quantum-safe” encryption methods to protect against future quantum attacks. However, the Chinese research emphasizes that such measures may need to be implemented urgently to safeguard sensitive information.

The research from Wang Chao’s team serves as a wake-up call for the cybersecurity community. With the power of quantum computing evolving rapidly, the time to rethink encryption strategies is now.

[ Related: Notable post-quantum cryptography initiatives paving the way toward Q-Day ]

“The growing threat from quantum computers requires immediate attention to ensure the security of our digital future,” the researchers warned in the paper.

“The early and widespread use of quantum computers could wreak havoc, enabling new advanced cyberattacks that are impossible using classical computers,” Kaur said. “Post-quantum cryptography (PQC) is the solution to this problem.”