Prepare for the next
era of computing
with quantum-safe
cryptography on
IBM z16

The security impact of quantum computing
Quantum computing is being referred to as the next technology
revolution. When a sufficiently powerful quantum computer is available,
it will open up new possibilities to solve challenging problems thatclassical computers can’t address. There are many exciting applicationsin industries including pharmaceuticals, finance, and manufacturing.
The problem is, quantum computers will also be able to solve the mathproblems that give many cryptographic algorithms their strength, whichwill have a significant impact on the classical encryption, hashing andpublic key algorithms we use today.
Quantum algorithms running on sufficiently powerful quantum
computers have the potential to weaken or break core cryptographic
primitives that we use to secure systems and communications. The factthat these algorithms can be broken leaves the foundation for global
digital security at risk. Organizations relying on weak algorithms will be
at risk of major data breaches. Temporary solutions like increasing RSAor ECC key size, will only buy a little time — like extra months, notextra years1.
Keep a step ahead with quantum-safe cryptography

in the United States and Germany have already issued requirements
for government agencies to begin quantum-safe modernization
planning and start using hybrid schemes for protection in high-security
applications by using a combination of both classical algorithm andquantum-safe algorithm.
Based on past experience, NIST expects most organizations will needbetween 5 to 15 years to implement new public-key standards once
they are available, so they advise beginning the transition as soon as
possible2. NIST advises taking action now, as it will help make thetransition process less expensive, less disruptive, and reduce thelikelihood of mistakes.
Future proof your business with IBM z16

TM

As we prepare for a quantum world, IBM is committed to developing
and deploying new quantum-safe cryptographic technology. IBM z16 is
the industry’s first quantum-safe system, protected by quantum-safe
technologies across multiple layers of firmware, to help protect yourbusiness-critical infrastructure and data from quantum attacks3.
IBM z16 quantum-safe secure boot technology protects system integrityby using quantum-safe and classical digital signatures to perform ahardware-protected verification of the IML firmware components.

Organizations and standards bodies are taking action to address thethreat. The National Institute of Standards and Technology (NIST)
initiated a process to solicit, evaluate and standardize new public-key
cryptographic algorithms that can resist threats posed by both theclassical computers we have today and quantum computers that will
be available in the future. Following three rounds of evaluation, NIST
plans to select a small number of new quantum-safe algorithms thisThis protection is anchored in a hardware-based Root of Trust for thefirmware chain of trust. This quantum-safe technology is designed toprovide a double layer of protection by using a dual signature scheme
which employs classical and quantum-safe cryptographic algorithms
to ensure the server starts safely and securely by keeping unauthorizedfirmware (malware) from taking over your server during system start-up.

year and have new quantum-safe standards in place by 2024. As part ofthis program, IBM researchers have been involved in the developmentof three quantum-safe cryptographic algorithms based on lattice
cryptography which are in the final round of consideration: CRYSTALSKyber, CRYSTALS-Dilithium and Falcon.

Leverage Pervasive Encryption for IBM Z®, a consumable approach to enable
extensive encryption of data in-flight and at-rest to substantially simplify
Quantum Safe encryption, reduce costs associated with protecting data andaid with mitigation of risks associated with Quantum threats.

Fortunately, we have time to implement quantum-safe solutions before
the advent of large-scale quantum computers — but not much time. We
don’t know when a large-scale quantum computer capable of breaking
public key cryptographic algorithms will be available, but experts predictthat this could be possible by the end of the decade. And, sensitive datawith a long lifespan is already vulnerable to “harvest now, decrypt later”
attacks: hackers can harvest encrypted data today and store it for later
when they can decrypt it using a quantum computer. Organizations

Now is the time to start planning for the replacement of hardware,
software and services that use public-key and weak symmetrickey cryptography. IBM z16 positions you to begin using quantumsafe cryptography along with classical cryptography as you begin
modernizing existing applications and building new applications.
IBM z16, with Integrated Cryptographic Service Facility (ICSF
HCR77D1), the Crypto Express 8S, TKE 10.0 and other security
features provide the vehicle to take advantage of these quantum-safe
capabilities.
IBM z16 will enable a number of critical client use cases across manyindustries with the following capabilities:• Quantum-safe key generation• Quantum-safe encryption• Quantum-safe hybrid key exchange schemes• Quantum-safe dual digital signature schemes1Tools and services to help accelerate your journey toquantum-safe security
As you prepare to adopt new quantum-safe standards, there are several
key milestones to follow:– Discover and classify data: Start by classifying the value of your data
and understanding compliance requirements. This helps you create adata inventory.
– Create a crypto inventory: Once you have classified your data, youwill need to identify how your data is encrypted, as well as other usesof cryptography to create a crypto inventory that will help you during
your migration planning. Your crypto inventory will include information
like encryption protocols, symmetric and asymmetric algorithms, keylengths, crypto providers, etc.
– Embrace crypto agility: The transition to quantum-safe standards
will be a multi-year journey as standards evolve and vendors moveto adopt quantum-safe technology. Use a flexible approach andbe prepared to make replacements. Implement a hybrid approachas recommended by industry experts by using both classical andquantum-safe cryptographic algorithms. This maintains compliancewith current standards while adding quantum-safe protection.
IBM z16 offers several tools to help you discover how cryptography isused in applications to aid in developing a crypto inventory for migrationand modernization planning. As you create your crypto inventory,
IBM z16 provides new instrumentation that can be used to track
cryptographic instruction execution in the CP Assist for Cryptographic

2Functions (CPACF). Additionally, IBM Application Discovery and Delivery
Intelligence (ADDI) software has been enhanced with capabilities todiscover where and what crypto is used in applications. Other tools thataid in crypto discovery on the platform include IBM ICSF Crypto Usage
Tracking, the IBM Crypto Analytics Tool (CAT), and z/OS® Encryption
Readiness Technology (zERT).
IBM Z Lab Services offers a Quantum Safe Risk Assessment to help
you discern how your technology may fare against quantum threats,
and review steps you can take today to prepare. This assessment
will help you discover and map your critical services relying on
encryption, inventory your encrypted data and encryption artifacts(keys, certificates), evaluate risks in the pre- and post-quantum era
and develop a transition roadmap including the latest quantum-safetechnologies.

For more information© Copyright IBM Corporation 2024

IBM z16 is designed to help you stay ahead of quantum threats andaccelerate your transition to a quantum-safe future. Explore quantumsafe technologies, crypto discovery tools and services available on
IBM z16, the powerful and secure platform for business:Armonk, NY 10504• IBM z16:
https://www.ibm.com/products/z16

IBM Corporation
New Orchard Road

IBM, the IBM logo, ibm.com, IBM Z, z16, andz/OS are trademarks of International Business Machines
Corp., registered in many jurisdictions worldwide. Other
product and service names might be trademarks of IBMor other companies. A current list of IBM trademarks
is available on the web at “Copyright and trademark
information” at www.ibm.com/legal/copytrade.shtml.
Java and all Java-based trademarks and logos aretrademarks or registered trademarks of Oracle and/or• IBM z16 Crypto Express 8S (CEX8S) Hardware Security Module(HSM): https://www.ibm.com/security/cryptocards/hsms• IBM Z Pervasive Encryption
https://www.ibm.com/support/z-content-solutions/pervasiveencryption/

its affiliates.
The registered trademark Linux® is used pursuant toa sublicense from the Linux Foundation, the exclusive
licensee of Linus Torvalds, owner of the mark on aworld¬wide basis.
Red Hat®, JBoss®, OpenShift®, Fedora®, Hibernate®,
Ansible®, CloudForms®, RHCA®, RHCE®, RHCSA®, Ceph®,and Gluster® are trademarks or registered trademarks ofRed Hat, Inc. or its subsidiaries in the United States and• IBM Application Discovery and Delivery Intelligence (ADDI) softwarewith crypto discovery:
https://www.ibm.com/products/app-discovery-and-delivery-intelligenceother countries.
This document is current as of the initial date ofpublication and may be changed by IBM at any time.
Not all offerings are available in every country in which
IBM operates. The client examples cited are presented• IBM Z Quantum Safe Risk Assessment:
https://www.ibm.com/downloads/cas/ON6K9KWA

for illustrative purposes only. Actual performance
results may vary depending on specific configurations
and operating conditions. THE INFORMATION IN
THIS DOCUMENT IS PROVIDED “AS IS” WITHOUT• IBM ICSF Crypto Usage Tracking:https://www.ibm.com/docs/en/zos/3.1.0?topic=guidemonitoring-users-jobs-that-perform-cryptographicoperations

ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDINGWITHOUT ANY WARRANTIES OF MERCHANTABILITY,FITNESS FOR A PARTICULAR PURPOSE AND ANY
WARRANTY OR CONDITION OF NON-INFRINGEMENT.
IBM products are warranted according to the terms
and conditions of the agreements under which they
are provided.

• Unified Key Orchestrator for IBM z/OS®
https://www.ibm.com/products/unified-keyorchestrator-for-zos

The client is responsible for ensuring compliance withlaws and regulations applicable to it. IBM does notprovide legal advice or represent or warrant that its
services or products will ensure that the client is incompliance with any law or regulation.

• IBM z/OS Encryption Readiness Technology:
https://www.ibm.com/docs/en/zos/3.1.0?topic=zert-using-zosencryption-readiness-technology

This publication was produced in the United States.
IBM may not offer the products, services or features
discussed in this document in other countries, and theinformation may be subject to change without notice.
Consult your local IBM business contact for information• z/OS Cryptographic Services:
https://www.ibm.com/docs/en/zos/3.1.0?topic=zos-cryptographicservices

1. The Top Security Technology Trends to Watch, Forrester, 2021
2. Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using PostQuantum Cryptographic Algorithms, NIST, 2021,
https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04282021.pdf
3. IBM z16 with the Crypto Express 8S card provides quantum- safe APIs providing access to quantum-safe
algorithms which have been selected by NIST to become part of its post-quantum cryptographic standard.
https://www.nist.gov/news-events/news/2022/07/nist-announces-first-four-quantum-resistant-cryptographicalgorithms Quantum-safe cryptography refers to efforts to identify algorithms that are resistant to attacks by bothclassical and quantum computers, to keep information assets secure even after a large-scale quantum computerhas been built. Source: https://www.etsi.org/technologies/quantum-safe-cryptography .” These algorithms are used
to help ensure the integrity of a number of the firmware and boot processes. IBM z16 is the Industry-first system
protected by quantum-safe technology across multiple layers of firmware. According to Peter Rutten, Research
Vice-President IDC, “z16 is the industry’s first quantum-safe computing platform.”3on the product or services available in your area.