BQSafe documentation
What is Post-Quantum Cryptography?
Post-Quantum Cryptography refers to cryptographic algorithms designed to be secure against the potential threats posed by quantum computers. While classical computers struggle with certain complex mathematical problems, quantum computers can solve some of these problems much faster. This poses a significant risk to current cryptographic systems, particularly those relying on algorithms like RSA, DSA, and DH, which could be broken by quantum algorithms such as Shor's algorithm. In essence, the advent of quantum computing necessitates a shift to new cryptographic standards that are resistant to quantum attacks.
What is BQSafe?
BQSafe is a powerful application designed to help developers and security professionals identify vulnerabilities in their codebase that might be exploited by quantum computers. BQSafe scans your code and categorizes potential vulnerabilities into three levels of urgency, helping you prioritize and address the most critical issues.
Urgency Levels
- High Urgency:
- Algorithms Affected: RSA, DSA, DH, ECDHA, ECDSA
- Description: These cryptographic algorithms are highly vulnerable to quantum attacks. A sufficiently powerful quantum computer could completely break these protocols, making it essential to replace them with quantum-resistant algorithms that have been standardized by NIST.
- Action Required: Immediate protocol changes are necessary to ensure security.
- Medium Urgency:
- Algorithms Affected: DES, AES-128, AES-192
- Description: While these algorithms are not as vulnerable as those in the high-urgency category, they still need to be strengthened. Quantum computers provide a substantial speedup over classical computers when attacking these algorithms. Upgrading to versions with longer key lengths is recommended to maintain security.
- Action Required: Upgrade to stronger versions.
- Low Urgency:
- Algorithms Affected: SHA-1, SHA-2, MD5
- Description: These hash functions are less sensitive to quantum attacks but should still be upgraded to SHA-3 to align with best practices. Quantum computers also have a quadratic speedup advantage here, but the risk is lower compared to other algorithms.
- Action Required: Upgrade to the latest versions, such as SHA-3.
How to Get BQSafe
Interested in securing your codebase against future quantum threats? Contact us today for a demo of BQSafe, and see how our tool can help safeguard your digital assets.