量子计算的发展对现有密码体系构成威胁，但这一转变可以作为可控的演进而非危机来应对。根据全球风险研究所2024年底的调查，32位量子计算专家估计量子计算机在2040年前有50%的概率破解2048位RSA密钥[1]。为应对这一潜在风险，美国政府为国家安全系统设定了明确的时间表[1]。2027年1月起，国家安全系统的新采购必须支持CNSA 2.0后量子密码算法；2031年要求实施该标准；到2035年目标实现100%采用[1]。
技术提供商已开始提供符合要求的解决方案。Intel Xeon 6处理器已集成量子安全内存加密（AES-256）和微代码签名保护[1]，体现了业界在量子抗性基础设施方面的进展。对于企业应对这一转变，专家建议采取分阶段现代化、优先保护机密性要求超过10年的信息，以及设计系统敏捷性等策略[1]。"现在收集、稍后解密"场景特别适用于对长期保密性有高要求的信息[1]。
The transition from current encryption systems to post-quantum cryptography (PQC) represents a manageable evolution rather than an imminent crisis, despite the potential threat quantum computing poses to existing algorithms.[1] According to a 2024 survey by the Global Risk Institute, 32 quantum computing experts estimated a 50% probability that quantum computers will break 2048-bit RSA encryption before 2040.[1] This timeline has prompted concrete action from government and industry stakeholders to prepare infrastructure for the shift.
The U.S. government has established a clear roadmap for national security systems, requiring new procurements to support CNSA 2.0 post-quantum cryptography algorithms starting January 2027, with full implementation required by 2031 and a target of 100% adoption by 2035.[1] Technology providers are already delivering quantum-resistant solutions: Intel's Xeon 6 processors now integrate quantum-safe memory encryption using AES-256 and microcode signature protection.[1] Organizations can manage this transition through phased modernization strategies, prioritizing protection of long-term sensitive data and designing systems for agility, particularly in scenarios involving "harvest now, decrypt later" attacks targeting information that requires confidentiality for more than a decade.[1]
