An official website of the United States government         Here's how you know         
**Official websites use .gov**
A **.gov** website belongs to an official government organization in the United States.
**Secure .gov websites use HTTPS**
 A **lock (lock )** or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Skip to main content (Press Enter).

National Security Agency/Central Security Service

Search
Search

Search

-  About    -  Leadership             
  -  Mission & Combat Support             
  -  Cybersecurity             
  -  Signals Intelligence             
  -  Central Security Service             
  -  Locations             
  -  Research             
  -  Diversity, Equity, Inclusion & Accessibility             
  -  Cybersecurity Collaboration Center      -  Collaborative Partnerships             
    -  Enduring Security Framework             
    -  DIB Cybersecurity Services             
    -  Standards and Certifications             
    -  Artificial Intelligence Security Center 
-  Press Room    -  Press Releases & Statements             
  -  News & Highlights             
  -  Declassification & Transparency Initiatives             
  -  Cybersecurity Advisories & Guidance             
  -  Telework and Mobile Security Guidance             
  -  DoD Microelectronics Guidance             
  -  Research Publications 
-  Careers    -  Unique Pathways             
  -  Innovation 
-  History    -  National Cryptologic Museum             
  -  Cryptologic History             
  -  National Cryptologic Memorial 

# Post-Quantum Cybersecurity Resources

HomeCybersecurityPost-Quantum Cybersecurity Resources

## **Post-Quantum Cryptography Algorithms **

NSA has announced its selections for quantum-resistant algorithms. Please see the Cybersecurity Advisory and FAQ for the Commercial National Security Algorithm (CNSA) Suite 2.0.

## **Quantum key distribution and quantum key cryptography**

Quantum key distribution utilizes the unique properties of quantum mechanical systems to generate and distribute cryptographic keying material using special purpose technology. Quantum cryptography uses the same physics principles and similar technology to communicate over a dedicated communications link.NSA continues to evaluate the usage of cryptography solutions to secure the transmission of data in National Security Systems. NSA does not recommend the usage of quantum key distribution and quantum cryptography for securing the transmission of data in National Security Systems (NSS) unless the limitations below are overcome.

Collapse AllExpand All

Read about these limitations in our complete QKD and QC guidance.

> 
**Synopsis**

NSA continues to evaluate the usage of cryptography solutions to secure the transmission of data in National Security Systems. NSA does not recommend the usage of quantum key distribution and quantum cryptography for securing the transmission of data in National Security Systems (NSS) unless the limitations below are overcome.

**What are Quantum Key Distribution (QKD) and Quantum Cryptography (QC)?**

Quantum key distribution utilizes the unique properties of quantum mechanical systems to generate and distribute cryptographic keying material using special purpose technology. Quantum cryptography uses the same physics principles and similar technology to communicate over a dedicated communications link. Published theories suggest that physics allows QKD or QC to detect the presence of an eavesdropper, a feature not provided in standard cryptography.

Quantum-resistant algorithms are implemented on existing platforms and derive their security through mathematical complexity. These algorithms used in cryptographic protocols provide the means for assuring the confidentiality, integrity, and authentication of a transmission—even against a potential future quantum computer. The National Institute of Standards and Technology (NIST) is presently conducting a rigorous selection process to identify quantum-resistant (or post-quantum) algorithms for standardization1. Once NIST completes its selection process, NSA will issue updated guidance through CNSSP-15.

**Understanding the QKD/QC story**

Quantum key distribution and Quantum cryptography vendors—and the media—occasionally state bold claims based on theory—e.g., that this technology offers “guaranteed” security based on the laws of physics. Communications needs and security requirements physically conflict in the use of QKD/QC, and the engineering required to balance these fundamental issues has extremely low tolerance for error. Thus, security of QKD and QC is highly implementation-dependent rather than assured by laws of physics. Although we refer to QKD only to simplify discussion below, similar statements can be made for QC.

**Technical limitations**

 
-  **Quantum key distribution is only a partial solution**. QKD generates keying material for an encryption algorithm that provides confidentiality. Such keying material could also be used in symmetric key cryptographic algorithms to provide integrity and authentication if one has the cryptographic assurance that the original QKD transmission comes from the desired entity (i.e. entity source authentication). QKD does not provide a means to authenticate the QKD transmission source. Therefore, source authentication requires the use of asymmetric cryptography or preplaced keys to provide that authentication. Moreover, the confidentiality services QKD offers can be provided by quantum-resistant cryptography, which is typically less expensive with a better understood risk profile. 
-  **Quantum key distribution requires special purpose equipment.**QKD is based on physical properties, and its security derives from unique physical layer communications. This requires users to lease dedicated fiber connections or physically manage free-space transmitters. It cannot be implemented in software or as a service on a network, and cannot be easily integrated into existing network equipment. Since QKD is hardware-based it also lacks flexibility for upgrades or security patches. 
-  **Quantum key distribution increases infrastructure costs and insider threat risks.**QKD networks frequently necessitate the use of trusted relays, entailing additional cost for secure facilities and additional security risk from insider threats. This eliminates many use cases from consideration. 
-  **Securing and validating quantum key distribution is a significant challenge.**The actual security provided by a QKD system is not the theoretical unconditional security from the laws of physics (as modeled and often suggested), but rather the more limited security that can be achieved by hardware and engineering designs. The tolerance for error in cryptographic security, however, is many orders of magnitude smaller than in most physical engineering scenarios making it very difficult to validate. The specific hardware used to perform QKD can introduce vulnerabilities, resulting in several well-publicized attacks on commercial QKD systems.2 
-  **Quantum key distribution increases the risk of denial of service.**The sensitivity to an eavesdropper as the theoretical basis for QKD security claims also shows that denial of service is a significant risk for QKD. 

 

**Conclusion**

In summary, NSA views quantum-resistant (or post-quantum) cryptography as a more cost effective and easily maintained solution than quantum key distribution. For all of these reasons, NSA does not support the usage of QKD or QC to protect communications in National Security Systems, and does not anticipate certifying or approving any QKD or QC security products for usage by NSS customers unless these limitations are overcome.

1See csrc.nist.gov/Projects/post-quantum-cryptography2 See, for example:
-  Vakhitov, Makarov, and Hjelme, *Large pulse attack as a method of conventional optical eavesdropping in quantum cryptography*, Journal of Modern Optics 48, 2001. 
-  Makarov and Hjelme, *Faked states attack on quantum cryptosystems, Journal of Modern Optics*, vol. 52, 2005. 
-  Ferenczi, Grangier, Grosshans, *Calibration Attack and Defense in Continuous Variable Quantum Key Distribution*, CLEO-IQEC, 2007. 
-  Zhao, Fung, Qi, Chen, and Lo, *Experimental demonstration of time-shift attack against practical quantum key distribution systems*, Physical Review A vol. 78, 2008. 
-  *Scarani and Kurtsiefer, The black paper of quantum cryptography: Real implementation problems, Theoretical Computer Science (560) 2014.* 

Please coordinate any engagement on this matter via email for Cybersecurity leads and media inquiries via NSA Public Affairs.

##### NSA.GOV

                                - About
                                - Leadership
                                - Cybersecurity Collaboration Center 
                                - National Cryptologic Museum 
                                - Contact NSA 
                                - Accessibility
                                - ABA Notice
                                - Site Policies

##### CULTURE

                                - Core Values
                                - Operating Authorities
                                -  Civil Liberties, Privacy, & Transparency Office 
                                - Compliance
                                - Diversity, Equity, Inclusion, & Accessibility
                                - General Counsel
                                - NSA Inspector General

##### HELPFUL LINKS

                                -  
                                - NSA Freedom of Information Act
                                - Privacy Act Requests
                                - Request a Speaker
                                - Prepublication Review
                                - Media Inquiry
                                - Frequently Asked Questions

##### RESOURCES

                                - Classified Materiel Conversion
                                - Commercial Solutions for Classified Program (CSfC) ​
                                - Cryptographic Support Services 
                                - Media Destruction Guidance 
                                - NSA Open Source

##### RELATED LINKS

                                - DNI.gov
                                - Defense.gov
                                - IC on the Record
                                - Intelligence.gov

                              - Privacy & Security      Links Disclaimer       Section 508       Web Policy       Plain Writing Act      DOD IG      No FEAR Act       Imagery Use      FOIA      Open GOV      Strategic Plan      USA.gov      Small Business Act      Site Map   

                          - NSA.GOV                              - About
                            - Leadership
                            - Cybersecurity Collaboration Center
                            - National Cryptologic Museum
                            - Contact NSA
                            - Accessibility
                            - ABA Notice
                            - Site Policies
                          - CULTURE                              - Core Values
                            - Operating Authorities
                            - Civil Liberties & Privacy
                            - Diversity, Equity, Inclusion, & Accessibility
                            - General Counsel
                            - NSA Inspector General
                          - HELPFUL LINKS                              - NSA Freedom of Information Act
                            - Privacy Act Requests
                            - Frequently Asked Questions
                            - Request a Speaker
                            - Prepublication Review
                            - Media Inquiry
                          - RESOURCES                              - Commercial Solutions for Classified Material (CSFC)
                            - Media Destruction Guidance
                            - Classified Materiel Conversion
                            - Cross Domain Services
                            - NSA Open Source
                            - NSA Exhibit Roadshow
                          - RELATED LINKS                              - DNI.gov
                            - Defense.gov
                            - IC on the Record
                            - Intelligence.gov

Hosted by Defense Media Activity - WEB.mil