India's Quantum-Safe Digital Ecosystem Report

Summary of DST Task Force Report on Quantum-Safe Digital Ecosystems

Key Threats and Concepts:

• Public-Key Cryptography: Essential for online identity protection and secure communications, relies on mathematical problems solvable by conventional computers.
• Quantum Computing Threat: Quantum computers could potentially break public-key encryption (e.g., using Shor's algorithm) in a short time, posing a risk to critical infrastructures like HTTPS and telecommunications.
• Harvesting Data Risk: Potential for malicious actors to collect encrypted data now and decrypt it later with quantum capabilities.

Post-Quantum Cryptography (PQC):

• Definition: Software designed to resist quantum computer attacks, operable on conventional systems.
• Recommendations: Adoption of three post-quantum standards by 2024 to enhance India's digital security architecture.

Migration Strategy:

• Urgency: Transition to PQC must commence, with a focus on critical sectors including finance, power, and defense.
• Anticipated Timeline: Experts suggest "Q-day," when quantum computers threaten current encryption, may be anticipated around 2029, but migration should be proactive.

Organizational Challenges:

• Complexity: Transition involves extensive dependencies across databases, legacy hardware, and software systems within organizations, particularly in government ministries.
• AI Risks: Advanced AI poses additional vulnerabilities, potentially compromising software layers prior to quantum threats.

Recommendations for India:

• Budget Allocation: Minimum ₹5,000 crore needed for upgrading infrastructure.
• Infrastructure Upgrades: Ensure interoperability and reduce vendor dependence.
• Human Capital Development: Focus on training engineers in Quantum Key Distribution (QKD), which is currently a rare skill set.
• Security vs. Efficiency: Regular reassessment of security needs against operational efficiency trade-offs posed by QKD.

Economic and Policy Implications:

• Investment: Significant financial commitment required to build a quantum-safe ecosystem.
• Strategic Planning: Proactive measures essential to safeguard national interests against evolving cyber threats.

This report highlights the necessity for India to enhance its digital security framework in anticipation of quantum computing advancements, ensuring that critical infrastructures remain protected against future threats.