Why Automakers Need to Prepare for the Quantum Security Challenge Now
Just months after Google achieved quantum supremacy and IBM unveiled their 1,000+ qubit processor, the automotive industry faces a critical security countdown.
Quantum computers are coming sooner than we think. According to leading experts surveyed in 2023, encryption-breaking quantum computers could be a reality within the next decade — some putting the chances at 50% or higher.
By then, quantum computers will be able to break today’s strongest vehicle encryption in just hours.
NIST, the U.S. National Institute of Standards and Technology, has set 2035 as the primary target for organisations to transition to quantum-resistant cryptography.
This timeline is particularly alarming for automakers, as cars manufactured today will still be on roads when quantum computers arrive.
The Quantum Threat
The challenge is significant: 60% of current vehicles use cryptographic standards that will be vulnerable to quantum decryption.
While quantum computers aren’t here yet, the threat is already present. Cybercriminals are currently harvesting and storing encrypted vehicle data, waiting for quantum computers to decrypt it. This “harvest now, decrypt later” approach means that sensitive data being transmitted today could be compromised in the future.
In addition, the complex nature of automotive systems means migration periods are long, risking an incomplete transition to quantum-safe cryptography before it’s too late. As a result, the industry needs a new approach to cryptographic security.
Why Automakers Must Act Now
Today’s vehicles rely on cryptographic standards (RSA and ECC) that will be defenseless against quantum computers. The industry’s timeline creates a unique vulnerability: cars being manufactured today will still be on roads when quantum computers arrive, creating an enormous fleet of vulnerable vehicles.
The scale of the challenge is unprecedented. Each modern vehicle requires management of over 500 encryption keys — five times more than current systems handle. When quantum-safe algorithms arrive, they’ll demand four times more processing power than today’s encryption. This combination of increased key volume and computational demands means automakers can’t simply flip a switch when quantum computers arrive — they need to build the infrastructure now.
Moreover, vehicle security isn’t just about protecting data — it’s about safeguarding human lives. Compromised vehicle systems could affect critical safety functions, making quantum readiness not just a security imperative, but a safety requirement.
NIST’s 2035 deadline for transitioning to quantum-resistant cryptography might seem distant, but for automakers, it’s barely one vehicle generation away.
The industry needs to act now to protect both current and future vehicles and start building post-quantum resilience, as the recent call for quantum cryptography of partners of 18 EU members states indicates.
Building Quantum Resilience Now
Successfully transitioning to quantum-safe cryptography calls for comprehensive cyber security risk management strategy, which include 2 critical capabilities:
- First, complete visibility across their key and certificates infrastructure. Modern vehicles rely on hundreds of encryption key and digital certificates for secure operations, and automakers need real-time monitoring of all these cryptographic assets. This includes understanding key lifecycle, certificate ownership, tracking lifecycles, and assessing vulnerabilities across departments.
- The second crucial capability is crypto-agility — the capacity to swiftly respond to cryptographic threats and deploy new cryptographic algorithms. As quantum computing approaches, organisations must be able to rapidly deploy new algorithms (when available) across vehicle fleets with zero downtime, while maintaining backward compatibility. This flexibility will ensure that vehicles remain secure as cryptographic standards evolve.
Combining comprehensive visibility with powerful transition capabilities means that automakers can confidently prepare for the quantum era while optimising current operations.
Such an early quantum readiness significantly reduces future risks and anticipates regulatory requirements. Most importantly, organisations gain a future-proofed infrastructure ready for evolving cryptographic standards, building consumer trust along the way.
Comprehensive Quantum Readiness with DuoKey
DuoKey delivers a quantum-ready key management (KMS) to assist and prepare automakers in their transition to post-quantum cryptography (PQC).
This advanced encryption key management solution enables organisations to deploy a security infrastructure that ensures complete control and visibility over cryptographic assets and streamlines quantum-resistant algorithm deployment when available.
Conclusion
The quantum threat to automotive security is not a distant possibility — it’s an immediate challenge requiring action today.
Cars manufactured today will still be on roads when quantum computers arrive, making them vulnerable to attacks. The risks are clear: quantum computers will break current encryption standards, and cybercriminals are already collecting encrypted vehicle data to decrypt later.
Automakers can prepare by gaining visibility into their cryptographic landscape and building the ability to rapidly deploy quantum-safe algorithms. DuoKey’s quantum-resistant KMS delivers both capabilities, helping organisations transition to quantum-ready security while protecting current operations.
Don’t wait for quantum computers to arrive. Start your quantum-ready journey today with DuoKey.
References
- Quantum-Ready Automotive Security by DuoKey — https://duokey.com/use-cases/quantum-ready-and-crypto-agile-automotive-security
- Quantum Threat Timeline 2023 — https://globalriskinstitute.org/publication/2023-quantum-threat-timeline-report/
- ‘Store now, decrypt later’: US leaders prep for quantum cryptography concerns — https://therecord.media/us-leaders-prep-for-quantum-cryptography-concerns
- Transition to Post-Quantum Cryptography Standards — https://nvlpubs.nist.gov/nistpubs/ir/2024/NIST.IR.8547.ipd.pdf
- Securing Tomorrow, Today: Transitioning to Post-
Quantum Cryptography — https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile&v=3 - Google claims ‘quantum supremacy’ for computer — https://www.bbc.com/news/science-environment-50154993
- IBM Releases First-Ever 1,000-Qubit Quantum Chip — https://www.scientificamerican.com/article/ibm-releases-first-ever-1-000-qubit-quantum-chip/
