Quantum safe encryption is encryption that not even a quantum computer can break. It will replace RSA and ECC, which a large quantum computer will be able to crack.
Quantum safe encryption is encryption that not even a quantum computer can break. It is also called post quantum cryptography or PQC. It is not encryption that uses a quantum computer. It is normal software that runs on the computers we have today. It is just built on maths problems that are hard even for a quantum computer.
Why do we need it?
Most encryption today is built on RSA or ECC. They are safe because a normal computer would need thousands of years to find the secret key. A large quantum computer can do it in a short time. That computer does not exist yet. But data stolen today can be unlocked when it arrives. This is called harvest now, decrypt later.
How does it work?
Quantum safe encryption uses other kinds of maths problems. One of them is built on grids of numbers in many dimensions. It is easy to create the problem, but very hard to solve it backwards. That is true for both normal computers and quantum computers.
In August 2024 the US institute NIST made the first methods a standard. They are called FIPS 203, 204 and 205. FIPS 203 is used to exchange keys when two machines need to talk securely. FIPS 204 and 205 are used for digital signatures.
Mixed encryption
The new methods are still young. That is why a mixed solution is often used at first. Here a classic method and a quantum safe method are used at the same time. An attacker then has to break both. This gives security even if one of the methods turns out to have a weakness.
Quantum safe encryption in HCL Notes and Domino
Notes and Domino use encryption in many places. That includes the user's Notes ID, the traffic between client and server, encrypted mail and TLS for web and mail. All of them are built on RSA today.
Domino 2026 has a new version of OpenSSL that supports the new methods. They are just not switched on for users yet. HCL lists the request for quantum safe encryption as Planning to Implement. We expect the first steps in Domino 2027. Read more in the article on quantum safe encryption in Notes 2027.
When must you be ready?
The EU wants high risk systems to be quantum safe by the end of 2030. The rest should follow by 2035 where possible. NIST will stop RSA and ECC completely in 2035. If you have data in Notes that must stay secret for many years, it is wise to start planning now. We are happy to help with Domino operations and Notes support.