DigiCert and Utimaco work on securing the future of IoT from quantum computing threats through collaboration with Microsoft | IoT For All

DigiCert and Utimaco work on securing the future of IoT from quantum computing threats through collaboration with Microsoft

-

DigiCert and Utimaco work on securing the future of IoT from quantum computing threats through collaboration with Microsoft

Proof of concept lays a foundation for quantum-resistant digital certificates for IoT devices

REDMOND, Washington, LEHI, Utah, AACHEN, Germany (February 12, 2019) — Today, DigiCert, Inc., the world’s leading provider of TLS/SSL, IoT and PKI solutions; Utimaco, one of the world’s top three Hardware Security Module providers; and Microsoft Research, a leader in quantum-safe cryptography, announced a successful test implementation of the “Picnic” algorithm, with digital certificates used to encrypt, authenticate and provide integrity for connected devices commonly referred to as the Internet of Things (IoT). This proof of concept provides a path toward a full solution, currently in development, that will protect IoT devices from future threats quantum computing could pose to today’s widely used cryptographic algorithms.

Currently, most IoT devices use RSA and ECC to protect confidentiality, integrity and authenticity for device identities and communication. Experts from the security community, including Dr. Brian LaMacchia from Microsoft Research, predict that large-scale quantum computers capable of breaking RSA and ECC public-key cryptography will exist within the next 10 to 15 years. Although this might seem like a long time away, many devices such as connected cars, smart homes, connected cities, connected medical devices and other critical infrastructures will either live longer than this or will take longer to update.

“DigiCert, Microsoft Research and Utimaco are collaborating today to solve tomorrow’s problem of defending connected devices and their networks against the new security threats that the implementation of quantum computers will unleash,” says Avesta Hojjati, Head of DigiCert Labs, the company’s R&D unit. “Together, we are leading the market with development of hybrid certificates that inject quantum-resistant algorithms alongside RSA and ECC to ensure long-term protection.”

The certificates are issued by DigiCert using the Picnic quantum-safe digital signature algorithm developed by Microsoft Research. To implement this algorithm and issue certificates, DigiCert has used an Utimaco Hardware Security Module. The full solution, in development, would provide quantum-safe digital certificate issuance and secure key management, helping companies future-proof their IoT deployments.

“The cooperation between DigiCert, Microsoft Research and Utimaco will help organizations implement secure and future-proof IoT products that are protected against the potential security threats of quantum computing,” said DigiCert CTO Dan Timpson.

Enterprises will be able to cost-effectively deploy these solutions at any scale. Further, these companies will provide solutions and tools to manufacturers of IoT devices to remain prepared for quantum threats. The goal is to keep the sensitive information and high-value assets safe.

“DigiCert, Utimaco and Microsoft’s successful test implementation provides a fundamental building block for the implementation of quantum-safe solutions,” said Dr. Thorsten Grötker, CTO at Utimaco. “Using these solutions, IoT manufacturers and other large organizations can innovate and develop products that are well prepared against coming quantum threats.”

Brian LaMacchia, Distinguished Engineer and Head of the Security and Cryptography Group at Microsoft Research, said, “The work that Microsoft Research is doing with DigiCert and Utimaco is important to develop quantum-secure cryptographic algorithms, protocols and solutions today so that in the near future enterprises will be able to transition to and deploy quantum-safe cryptography. Working to ensure that their solutions are cryptographically agile will help companies avoid expensive and unscalable security practices to protect their IoT devices against future security threats.”

About DigiCert, Inc.

DigiCert is the world’s leading provider of scalable TLS/SSL, PKI solutions for identity and encryption. The most innovative companies, including 89 percent of Fortune 500 companies and 97 out of the 100 top global banks, choose DigiCert for its expertise in identity and encryption for web servers and Internet of Things devices. DigiCert supports TLS/SSL and other digital certificates for PKI deployments at any scale through its certificate lifecycle management platform, CertCentral®. The company is recognized for its enterprise-grade certificate management platform, fast and knowledgeable customer support, and market-leading security solutions. For the latest DigiCert news and updates, visit digicert.com or follow @digicert.

About Utimaco

Utimaco is an international provider of IT security solutions based in Aachen (Germany) and Campbell, CA (US). Utimaco develops hardware security modules and compliance solutions for telecommunication providers in the field of regulation. Utimaco is one of the world’s leading manufacturers in both technology segments. Over 220 employees are committed to the company´s goal to protect people, ideas and data and to create trust for the digital economy. Customers and partners value the reliability and long-term investment security solutions. Utimaco stands for recognized product quality, user-friendly software, excellent support and products that effectively meet market requirements. Find out more on www.utimaco.com.

IoT For All
IoT For All
IoT For All is an initiative to build a valuable resource for all stakeholders in the IoT industry. Our goal is to bring together the smartest minds in IoT to share knowledge through various forms of content, all aimed at educating the people who are implementing and enabling IoT.

Trending

Cartoon of a brain and a city in the background

Artificial Intelligence and Machine Learning: The Brain of a Smart City

AI and ML can improve decision making, personalize experiences and enhance decision making in smart cities, but at the risk of bias and abuse.
"Business" Newspaper with geometric shapes overlaying it

How Companies Are Leveraging Microsoft Azure’s IoT Hub

The article details out how Microsoft Azure has been used by some of the biggest companies in the world to incrporate IoT in some of the products they're building.
Two taxi cabs and the text "5G"

6 Ways 5G Will Change the IoT Solutions Space

The implementation of 5G will facilitate even smoother and more capable networks. So how will this affect the IoT? Keep reading to find out.
The text "AI" and a background image of packages on shelves

3 Ways AI Improves Manufacturing Intelligence

Manufacturers often view AI as highly complex and expensive, requiring end-to-end systems throughout their whole company to work properly. The reality is, AI is much more focused and achievable. It can work on factory floors with minimal construction and get connected to machines via the Industrial Internet of Things (IIoT). With this article, the author presents key advice and three scenarios for how manufacturing intelligence has been used in real settings.
Image of Assar Badri, CEO and Co-founder of CoreKinect is the guest on IFA's Podcast Episode 37

E037 | How Will LPWAN Impact IoT? | Assar Badri, CEO & Co-Founder of...

On this IoT For All podcast episode, the senior team from CoreKinect (Assar Badri, CEO and Co-Founder; John Horn, President and Chief Strategy Officer; and Mitchel Kelley, Principal Engineer) discuss building custom hardware and how LPWAN will impact IoT.