Quantum computing, with its transformative computational potential, is gaining prominence in the technological landscape. As a new and exotic technology, quantum computers involve innumerable Intellectual Property (IP) in the form of fabrication recipe, control electronics and software techniques, to name a few. Furthermore, complexity of quantum systems necessitates extensive involvement of third party tools, equipment and services which could risk the IPs and the Quality of Service and enable other attack surfaces. This paper is a first attempt to explore the quantum computing ecosystem, from the fabrication of quantum processors to the development of specialized software tools and hardware components, from a security perspective. By investigating the publicly disclosed information from industry front runners like IBM, Google, Honeywell and more, we piece together various components of quantum computing supply chain. We also uncover some potential vulnerabilities and attack models and suggest defenses. We highlight the need to scrutinize the quantum computing supply chain further through the lens of security.
Quantum computing, with its transformative computational potential, is gaining prominence in the technological landscape. As a new and exotic technology, quantum computers involve innumerable Intellectual Property (IP) in the form of fabrication recipe, control electronics and software techniques, to name a few. Furthermore, complexity of quantum systems necessitates extensive involvement of third party tools, equipment and services which could risk the IPs and the Quality of Service and enable other attack surfaces. This paper is a first attempt to explore the quantum computing ecosystem, from the fabrication of quantum processors to the development of specialized software tools and hardware components, from a security perspective. By investigating the publicly disclosed information from industry front runners like IBM, Google, Honeywell and more, we piece together various components of quantum computing supply chain. We also uncover some potential vulnerabilities and attack models and suggest defenses. We highlight the need to scrutinize the quantum computing supply chain further through the lens of security.
Quantum computing, with its transformative computational potential, is gaining prominence in the technological landscape. As a new and exotic technology, quantum computers involve innumerable Intellectual Property (IP) in the form of fabrication recipe, control electronics and software techniques, to name a few. Furthermore, complexity of quantum systems necessitates extensive involvement of third party tools, equipment and services which could risk the IPs and the Quality of Service and enable other attack surfaces. This paper is a first attempt to explore the quantum computing ecosystem, from the fabrication of quantum processors to the development of specialized software tools and hardware components, from a security perspective. By investigating the publicly disclosed information from industry front runners like IBM, Google, Honeywell and more, we piece together various components of quantum computing supply chain. We also uncover some potential vulnerabilities and attack models and suggest defenses. We highlight the need to scrutinize the quantum computing supply chain further through the lens of security.
Quantum computing (QC) is an emerging paradigm with the potential to transform numerous application domains by addressing classically intractable problems. However, its growing presence in cyberspace has introduced new security and privacy challenges. Similar to classical computing systems, the QC stack including software and hardware relies extensively on third parties, many of which are emerging and trust-seeking or less-trusted. This stack often contains sensitive intellectual property (IP) that demands protection. Unique features of quantum systems can enable classical-style attacks: for instance, crosstalk in multitenant settings can facilitate fault-injection attacks, while malicious calibration services can misreport error rates or miscalibrate qubits to induce denial-of-service (DoS) conditions. Given the high cost and limited availability of likely trustworthy quantum hardware, users may be enticed to explore emerging and trust-seeking but cheaper and readily available quantum hardware, which can enable the stealth of IP and tampering of quantum programs and/or computation outcomes. Similarly, emerging compilation services may compromise circuit confidentiality or insert Trojans. Despite the strategic significance of QC and its potential to process sensitive information, its security and privacy concerns remain underexplored. This article presents a comprehensive overview of QC fundamentals, key vulnerabilities, recent attack vectors, and corresponding defenses, and concludes with directions for future research to strengthen the quantum security community.
Quantum computers pose a significant threat to blockchain technology's security, which heavily relies on public-key cryptography and hash functions. The cryptographic algorithms used in blockchains, based on large odd prime numbers and discrete logarithms, can be easily compromised by quantum computing algorithms like Shor's algorithm and its future qubit variations. This survey paper comprehensively examines the impact of quantum computers on blockchain security and explores potential mitigation strategies. We begin by surveying the existing literature on blockchains and quantum computing, providing insights into the current state of research. We then present an overview of blockchain, highlighting its key components and functionalities. We delve into the preliminaries and key definitions of quantum computing, establishing a foundation for understanding the implications on blockchain security. The application of blockchains in cybersecurity is explored, considering their strengths and vulnerabilities in light of evolving quantum computing capabilities. The survey focuses on the quantum security of blockchain's fundamental building blocks, including digital signatures, hash functions, consensus algorithms, and smart contracts. We analyze the vulnerabilities introduced by quantum computers and discuss potential countermeasures and enhancements to ensure the integrity and confidentiality of blockchain systems. Furthermore, we investigate the quantum attack surface of blockchains, identifying potential avenues for exploiting quantum computing to strengthen existing attacks. We emphasize the need for developing quantum-resistant defenses and explore solutions for mitigating the threat of quantum computers to blockchains, including the adoption of quantum and post-quantum blockchain architectures. By examining vulnerabilities and discussing mitigation strategies, we aim to guide researchers, practitioners, and policymakers in developing robust and secure blockchain systems capable of withstanding advancements in quantum computing technology.
Quantum computers pose a significant threat to blockchain technology’s security, which heavily relies on public-key cryptography and hash functions. The cryptographic algorithms used in blockchains, based on large odd prime numbers and discrete logarithms, can be easily compromised by quantum computing algorithms like Shor’s algorithm and its future qubit variations. This survey paper comprehensively examines the impact of quantum computers on blockchain security and explores potential mitigation strategies. We begin by surveying the existing literature on blockchains and quantum computing, providing insights into the current state of research. We then present an overview of blockchain, highlighting its key components and functionalities. We delve into the preliminaries and key definitions of quantum computing, establishing a foundation for understanding the implications on blockchain security. The application of blockchains in cybersecurity is explored, considering their strengths and vulnerabilities in light of evolving quantum computing capabilities. The survey focuses on the quantum security of blockchain’s fundamental building blocks, including digital signatures, hash functions, consensus algorithms, and smart contracts. We analyze the vulnerabilities introduced by quantum computers and discuss potential countermeasures and enhancements to ensure the integrity and confidentiality of blockchain systems. Furthermore, we investigate the quantum attack surface of blockchains, identifying potential avenues for exploiting quantum computing to strengthen existing attacks. We emphasize the need for developing quantum-resistant defenses and explore solutions for mitigating the threat of quantum computers to blockchains, including the adoption of quantum and post-quantum blockchain architectures. By examining vulnerabilities and discussing mitigation strategies, we aim to guide researchers, practitioners, and policymakers in developing robust and secure blockchain systems capable of withstanding advancements in quantum computing technology.
The advent of quantum computing marks a transformative era in cybersecurity, challenging traditional cryptographic frameworks and broadening the horizons of computational capabilities. This paper navigates the transition to a quantum-resistant security framework, offering a critical analysis of encryption methods essential for the protection of critical infrastructure and cloud services in the quantum era. It meticulously evaluates the effects of quantum computing across various infrastructure layers, including applications, data, runtime, middleware, operating systems, virtualization, hardware, storage, and networks. Through a nuanced exploration of potential vulnerabilities and the evolving threat landscape conferred by quantum technologies, our study delivers strategic insights for the development of effective countermeasures. Our comprehensive inquiry underscores the pivotal shift necessitated by the disruptive potential of quantum computing, advocating for preemptive and inventive security strategies. It calls for concerted, multi-sectoral collaboration to cultivate resilient, quantum-resistant cryptographic practices. Through meticulous research, we articulate the emergent threat vectors posed by quantum technologies and evaluate post-quantum cryptographic solutions, laying the groundwork for safeguarding both current and prospective infrastructural and cloud ecosystems. Significantly, this study introduces a tailored security blueprint encompassing nine critical infrastructure components, reinforcing each domain’s defenses against quantum-induced cyber threats. Our strategic vulnerability assessment provide essential countermeasures, equipping stakeholders with the ability to navigate the complex, quantum-threatened landscape. These contributions are integral for those tasked with critical infrastructure stewardship, influencing design, implementation, and policy formulation. In essence, this paper not only forecasts quantum threats but also offers a sophisticated, actionable framework for strengthening infrastructure and cloud environments against the multifaceted challenges of the quantum era.
With rising cyberattack frequency and range, Quantum Computing companies, institutions and research groups may become targets of nation-state actors, cybercriminals and hacktivists for sabotage, espionage and fiscal motivations as the Quantum computing race intensifies. Quantum applications have expanded into commercial, classical information systems and services approaching the necessity to protect their networks, software, hardware and data from digital attacks. This paper discusses the status quo of quantum computing technologies and the quantum threat associated with it. We proceed to outline threat vectors for quantum computing systems and the respective defensive measures, mitigations and best practices to defend against the rapidly evolving threat landscape. We subsequently propose recommendations on how to proactively reduce the cyberattack surface through threat intelligence and by ensuring security by design of quantum software and hardware components.