Singapore And France Explore Post-Quantum Computing For Secure Payments

According to Cointelegraph, the Monetary Authority of Singapore (MAS) and Banque de France (BDF) have successfully conducted an experiment utilizing post-quantum computing (PQC) to counter the potential threats posed by quantum computing to payment networks. The initial phase of this initiative involved securing emails on Microsoft Outlook, marking a significant step towards integrating PQC into the global banking infrastructure. The BDF and MAS exchanged digitally signed and encrypted emails using a PQC email plugin, achieving success with the existing internet infrastructure. This was done in accordance with post-quantum encryption standards established by the United States Department of Commerce National Institute of Standards and Technology in August. The MAS released a technical report highlighting the importance of this research in safeguarding the financial system against future threats. The report emphasized the 'harvest now, decrypt later' scenario, where adversaries could intercept and store encrypted data now, waiting for quantum computers to decrypt it in the future. The research also pointed out the need for additional standardization to ensure the confidentiality, authentication, and integrity of payment networks. Currently, there are no standards for hybridizing PQC security algorithms with existing public key infrastructure, digital certificates, and key exchanges. The experiment revealed that PQC keys required for decrypting messages are significantly larger than current keys, which may trigger existing security measures if email servers are not consistently updated. This experiment focused solely on Outlook. The challenges identified may become more pronounced in financial applications, which involve frequent transactions and extensive cross-border cooperation. BDF's first deputy governor, Denis Beau, expressed confidence in the ability to enhance inter-institutional communications' resilience. The agencies plan to address the remaining challenges in the next phase of their research. Singapore and France have been actively researching PQC across various fronts. The BDF and the German central bank are involved in the Bank for International Settlements’ Project Leap, which aims to develop PQC solutions for payment networks. Singapore is also offering co-funding for developers working on PQC technology centers and use cases. Additionally, France and Singapore collaborate extensively on central bank digital currency research.