Post-Quantum Cryptography (PQC) and Security Roadmap

Within a 3 to 5-year horizon, the advent of quantum computers poses a serious threat to current cryptographic systems. Malicious actors or destabilizing foreign powers can begin intercepting and storing encrypted data today, with the intent of decrypting it later using quantum algorithms (a "harvest now, decrypt later" attack).

The feasibility of decryption via quantum algorithms has been established since the 1990s and is only delayed by the time required for hardware manufacturers to stabilize quantum computers. With this in mind, it is crucial for institutions to establish a roadmap now to ensure the transition of current encryption, storage, and information transport technologies to post-quantum approaches. Depending on the use case, strategies will favor classical, quantum, or a combination of both approaches.

Our PQC guidance service assists organizations with:

• The inventory and mapping of current cryptographic assets and protocols.
• Risk assessment against quantum attacks over a 3 to 5-year horizon.
• The selection of post-quantum (NIST PQC, CRYSTALS-Kyber, Dilithium) or classical (DSKE, etc.) algorithms in response to identified risks.
• The definition of a roadmap that includes asset migration, systems integration, and compatibility with industry standards.​
• The alignment of the roadmap with regulatory requirements and recommendations from governing bodies.
• We leverage AWS solutions (such as AWS Key Management Service, AWS Certificate Manager, and AWS CloudHSM) to prototype and validate new cryptographic configurations in a secure environment. These prototypes allow clients to anticipate and mitigate long-term compromise risks and to comply with the recommendations of cybersecurity regulatory bodies.

More about Levio: https://partners.amazonaws.com/partners/0010L00001pBFrTQAW/