DARPA Advances Quantum Computing Funding, Raising Near‑Term Risk to Cryptographic Controls
What Happened — DARPA’s Quantum Benchmarking Initiative (QBI) moved four quantum‑computing firms—Atom Computing, IonQ, Diraq and IBM—into “Stage C,” where hardware will be evaluated against real‑world performance claims. The program can award up to $300 million to participants, accelerating development of utility‑scale quantum computers that could eventually break current public‑key cryptography (e.g., Bitcoin’s elliptic‑curve signatures).
Why It Matters for Trust & Control Assurance
- Continuous control‑assurance programs must anticipate emerging technology that could invalidate existing cryptographic controls.
- Mapping this quantum‑risk scenario to a single control objective—cryptographic algorithm assurance—provides evidence that your organization is monitoring and preparing for future de‑risking requirements.
- Verisq’s Control Mapping capability helps you align quantum‑risk assessments with multiple frameworks (NIST CSF, ISO 27001, etc.) and generate defensible audit evidence today.
Who Is Affected
- Financial services, energy, manufacturing, and any sector that relies on public‑key cryptography for data protection, transaction signing, or identity verification.
Recommended Actions
- Review your cryptographic algorithm inventory and identify assets that depend on RSA/ECC.
- Map the “cryptographic algorithm assurance” control to your framework of record and collect evidence of key‑rotation, algorithm‑strength testing, and quantum‑resilience planning.
- Begin a quantum‑risk assessment roadmap and document mitigation steps (e.g., migration to post‑quantum algorithms). Source: DataBreachToday
Technical Notes
- No specific vulnerability disclosed; the risk stems from projected quantum‑computing capabilities that could execute Shor’s algorithm against elliptic‑curve signatures.
- DARPA’s funding timeline extends to 2029, with staged hardware demonstrations to validate qubit fidelity (>99.99% reported for IonQ). Source: DataBreachToday