IBM Quantum Safe
Remediator
Seamlessly transition your enterprise to quantumsafe cryptography and build crypto-agility.

Highlights
Enhance cyber resiliency
by protecting applications
with an adaptive proxy while
enabling communications
with different browser clientson the network
Test various combinations ofquantum-safe cryptographic
algorithms to optimize
performance before
deploying to production
Build crypto-agility bycentralizing cryptography
management andimplementing quantum-safe

Quantum-safe cryptography refers to encryption algorithms and protocols thatare resistant against classical computers as well as future cryptographically
relevant quantum computer (CRQC) driven decryption attacks. Even before aCRQC becomes available, “harvest now, decrypt later” attacks could enablecybercriminals to obtain and store data until they can decrypt it. Sensitive datawith a long term data value, such as tax records, medical records, passports, aswell as critical infrastructure systems, are at risk today. Preparedness is crucial.
It is now possible to protect assets against future threats with quantum-safe
cryptographic solutions.
IBM Quantum Safe Remediator provides you with capabilities to seamlessly
upgrading your existing IT infrastructure to quantum-safe. It offers a robust set ofcomponents and patterns for application, network, and third-party remediation
across various client–server communication scenarios. Build crypto-agility as you
centralize cryptography management while also exploring, testing, and applying
best practices for remediation.

Secure communications between applications, data,and network systems.
Protect your applications and network endpoint without
having to modify code or overhaul your existing IT
infrastructure. By positioning an adaptive proxy as anintermediary between your server and clients of all types:
legacy, hybrid, and quantum-safe-cryptography-enabled.
Centralize cryptographic management for agility.
Bring cryptography management into a centeralized
function to enable crypto-agility for faster modifications,replacements (as needed) for encryption, and use of keys
and certificates across enterprise.
Optimize deployment of PQC algorithms andremediation patterns with test harness.
Evaluate the performance of quantum-safe cryptography
protocols as a means to gain insights on how to best use
the algorithms and optimize performance accordingly
before deploying changes to production.

Sign up to view a live demo at ibm.com/quantumsafe

Adaptive ProxyThe Adaptive Proxy will analyze if a request is coming from either a quantum-safe
browser or a non-quantum-safe browers, and automatically establish a secureconnection to an application. A common use case scenario is when an application,
server, or endpoint cannot be remediated. Adaptive proxy can ensure a quantum
safe connectivity, thus creating an agile solution to protect against “harvest now,decrypt later” situations.
It is achieved by enabling fully backward compatible quantum-safe
communication across applications or servers. It involves positioning an adaptive
proxy as an intermediary between clients and servers and implementing
quantum-safe encryption, decryption, and key exchange mechanisms toensure confidentiality, integrity, and authentication of the transmitted data. It isdeployable on VMs, in containers, or to protect entire Kubernetes or Open Shiftclusters.

Performance test harness - Insight before Action
The performance test harness provides a testbed for gathering insights andconducting independent performance benchmarks, such as OpenSSL and h2load,and establishes baselines across public networks before implementation on yourclient environment to obtain targeted performance metrics. Using a suite of test
scripts and software packages along with a dashboard, the performance test
harness enables the client to know exact behavior of the algorithms used andcompare standardized benchmarks against the tests executed in your environment
to guide your remediation actions as you transition to quantum-safe cryptography.

IBM Quantum Safe Remediator prerequisites
The Adaptive Proxy and performance test harness requires the following system and software:
Adaptive Proxy

Performance test harness

System requirements(50GB memory)

Virtual Server Instance/Virtual Machine
CPU: 8CORE: 4
RAM: 64GB
Operating System:
RHEL- Version 7.1 or later
Ubuntu - Version 20.04 or later

Virtual Server Instance/ Virtual Machine
CPU: 8CORE: 4
RAM: 64GB
Operating System:
RHEL- Version 7.1 or later
Ubuntu - Version 20.04 or later

Software requirements

Docker client
Version: 25.0.3+

Docker client
Version: 25.0.3+

Note: The number of virtual machine (VM) instances required for the performance test harness depends on the test scenario(s) you
select—for example, if there are client components on one VM and server components on another VM, or if both are on the same VM, etc.
Also, these configurations may vary depending on the expected traffic and usage.

Begin your quantum-safe transition today
Take the next steps to transform your cryptography for the quantum era with IBM Quantum Safe Remediator.
Get started today at ibm.com/quantumsafe

2IBM Quantum Safe Remediator© Copyright IBM Corporation 2024
IBM Corporation
New Orchard RoadArmonk, NY 10504
Produced in theUnited States of AmericaMay 2024

IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business
Machines Corporation, in the United States and/or other countries. Other product and service names
might be trademarks of IBM or other companies. A current list of IBM trademarks is available on ibm.com/trademark.
This document is current as of the initial date of publication and may be changed by IBM at any time.
Not all offerings are available in every country in which IBM operates.
THE INFORMATION IN THIS DOCUMENT IS PROVIDED “AS IS” WITHOUT ANY WARRANTY,EXPRESS OR IMPLIED, INCLUDING WITHOUT ANY WARRANTIES OF MERCHANTABILITY, FITNESSFOR A PARTICULAR PURPOSE AND ANY WARRANTY OR CONDITION OF NON-INFRINGEMENT.
IBM products are warranted according to the terms and conditions of the agreements underwhich they are provided.