China’s quantum advances expand the spectre of quantum cyberattacks against India’s digital infrastructure, which already faces a barrage of attacks from Chinese state-sponsored hackers. Last month, there were reports that the Indian Army is developing cryptographic techniques to make its networks resistant to attacks by systems with quantum capabilities. The Army has collaborated with industry and academia to build secure communications and cryptography applications. This step builds on last year’s initiative to establish a quantum computing laboratory at the military engineering institute in Mhow, Madhya Pradesh.
With traditional encryption models at risk and increasing military applications of quantum technology, the deployment of “quantum-resistant” systems has become the need of the hour. This requires upgrading current encryption standards that can be broken by quantum cryptography. Current protocols like the RSA will quickly become outdated. This means that quantum cyberattacks can potentially breach any hardened target, opening a significant vulnerability for existing digital infrastructure. Hack proofing these systems will require considerable investments.
This is a challenge that India will have to proactively deal with as cyber risks arising from quantum computing are accentuated by the lead taken by some nations in this sector. For example, the US National Quantum Initiative Act has already allocated $1.2 billion for research in defence-related quantum technology. Particularly worrying for India is the fact that China now hosts two of the world’s fastest quantum computers.
India is getting there slowly but steadily. In February 2022, a joint team of the Defence Research and Development Organisation and IIT-Delhi successfully demonstrated a QKD link between two cities in UP — Prayagraj and Vindhyachal — located 100 kilometres apart.
China’s quantum advances expand the spectre of quantum cyberattacks against India’s digital infrastructure, which already faces a barrage of attacks from Chinese state-sponsored hackers. India’s dependence on foreign, particularly Chinese hardware, is an additional vulnerability. The question then arises: How to make India’s cyberspace resilient?
In 2019, the Centre declared quantum technology a “mission of national importance”. The Union Budget 2020-21 had proposed to spend Rs 8,000 crore on the newly launched National Mission on Quantum Technologies and Applications. This has to be complemented by a strong focus on securing cyberspace from quantum attacks.
Currently, India has very few capabilities in developing advanced systems capable of withstanding quantum cyberattacks. India must consider procuring the United States National Security Agency’s (NSA) Suite B Cryptography Quantum-Resistant Suite as its official encryption mechanism. The NSA is developing new algorithms for their cypher suite that are resistant to quantum cyberattacks. This can then facilitate India’s official transition to quantum-resistant algorithms.
The Indian defence establishment can consider emulating the cryptographic standards set by the US’s National Institute of Standards and Technology (NIST) which has developed a series of encryption tools to handle quantum computer attacks. It has developed a series of four algorithms to frame a post-quantum cryptographic standard. After adopting these technical steps, India must start its national initiatives to develop quantum-resistant systems. For this, the government can fund and encourage existing open-source projects related to post-quantum cryptography along with active participation in the Open Quantum Safe project — a global initiative started in 2016 for prototyping and integrating quantum-resistant cryptographic algorithms.
Two, the country should start implementing and developing capabilities in quantum-resistant communications, specifically for critical strategic sectors. QKDs over long distances, especially connecting military outposts for sensitive communications, can be prioritised to ensure secure communications whilst protecting key intelligence from potential quantum cyberattacks. Eventually, this can help establish a nationwide communication network integrated with quantum cryptographic systems, thereby protecting cyberspace from any cross-border quantum cyber offensive.
Finally, diplomatic partnerships with other “techno-democracies” — countries with top technology sectors, advanced economies, and a commitment to liberal democracy — can help India pool resources and mitigate emerging quantum cyber threats. The world is moving towards an era in which the applications of quantum physics in strategic domains will soon become a reality, increasing cybersecurity risks. India needs a holistic approach to tackle these challenges. At the heart of this approach should be the focus on post-quantum cybersecurity.
Gargeyas is a Research Analyst, High Tech Geopolitics programme at the Takshashila Institution. Patil is a Senior Fellow at the Observer Research Foundation