23.11.2022 Roland van Rijswijk-Deij (Professor of Network Security at University of Twente, Principal Scientist at NLnet Labs) - Quantum Prooving the Internet

## Title
Quantum Prooving the Internet

## Abstract
Today’s Internet cannot do without confidentiality and online identification. The cryptography typically used to achieve this, however, is under threat from quantum computers. While a practical quantum computer is years away, it also takes years to standardise and deploy alternative cryptography. Worse, applications that store data long‐term (e.g., captured encrypted Internet traffic) require action now, since if current cryptography is broken, stored data is immediately compromised.

Cryptographers are developing post‐quantum cryptography (PQC) that is secure against attacks with quantum computers. While much progress has been made developing and trialling algorithms, we lack a complete view of the problem space. More boldly: we cannot answer the question “what if the whole Internet had to switch to PQC?”. Nobody “owns the Internet” so who will tackle this challenge? Sure, the tech giants should take action, but the Internet is much broader than that. In my view, this challenge can only be solved with an independent holistic approach that considers all aspects of the Internet.

In this talk I will explore the research challenges for quantum-proofing the whole Internet and will propose a research agenda to tackle these challenges. I will show how we need to examine all parts of the Internet that rely on public-key cryptography and how we need to decide if we can simply replace algorithms, if we maybe have to re-engineer protocols and applications, or if the costs are simply too high and we should retire protocols or applications.

## Short CV

After two decades in the industry, working on applied cryptography and network security, Roland is professor of measurement-based Internet security at the University of Twente since 2021. His research interests are in the application of global-scale Internet measurements to support empirically-backed securityanalysis and improvements of Internet protocols and the transition of the Internet to post-quantum cryptography.

## Info about your institution

Roland is a member of the Design and Analysis of Communications Systems group at the University of Twente, and a researcher in the Twente University Centre for Cybersecurity Research (TUCCR). Roland also advises NLnet Labs, a not-for-profit that develops open source software for core Internet protocols, on scientific research.

Protecting against cyber risks is the domain of Cybersecurity. The Cyber CNI Speaker series wants to raise awareness and understanding of cybersecurity topics. It wants to enable a continuous dialog between experts from industry and academia and the general public, including individuals, families, companies from small to large sizes, and public bodies – in short everyone, since cybersecurity is relevant for each of us.

The Cyber CNI speaker series is a free monthly event on the last Wednesday of the month from 17h-18h30. The event consists of an expert talk of about 40 minutes followed by 30 minutes discussion.

The events happen in the Grand Amphitheatre at IMT Atlantique in Rennes (Cesson-Sévigné) AND are broadcasted live over Youtube (talk.cybercni.fr/), enabling global remote participation and including a tool for participating in the discussion.
You are cordially invited to participate. Please safe the dates and subscribe to receive email notifications!

23.11.2022 Roland van Rijswijk-Deij (Professor of Network Security at University of Twente, Principal Scientist at NLnet Labs) - Quantum Prooving the Internet

## Title
Quantum Prooving the Internet

## Abstract
Today’s Internet cannot do without confidentiality and online identification. The cryptography typically used to achieve this, however, is under threat from quantum computers. While a practical quantum computer is years away, it also takes years to standardise and deploy alternative cryptography. Worse, applications that store data long‐term (e.g., captured encrypted Internet traffic) require action now, since if current cryptography is broken, stored data is immediately compromised.

Cryptographers are developing post‐quantum cryptography (PQC) that is secure against attacks with quantum computers. While much progress has been made developing and trialling algorithms, we lack a complete view of the problem space. More boldly: we cannot answer the question “what if the whole Internet had to switch to PQC?”. Nobody “owns the Internet” so who will tackle this challenge? Sure, the tech giants should take action, but the Internet is much broader than that. In my view, this challenge can only be solved with an independent holistic approach that considers all aspects of the Internet.

In this talk I will explore the research challenges for quantum-proofing the whole Internet and will propose a research agenda to tackle these challenges. I will show how we need to examine all parts of the Internet that rely on public-key cryptography and how we need to decide if we can simply replace algorithms, if we maybe have to re-engineer protocols and applications, or if the costs are simply too high and we should retire protocols or applications.

## Short CV

After two decades in the industry, working on applied cryptography and network security, Roland is professor of measurement-based Internet security at the University of Twente since 2021. His research interests are in the application of global-scale Internet measurements to support empirically-backed securityanalysis and improvements of Internet protocols and the transition of the Internet to post-quantum cryptography.

## Info about your institution

Roland is a member of the Design and Analysis of Communications Systems group at the University of Twente, and a researcher in the Twente University Centre for Cybersecurity Research (TUCCR). Roland also advises NLnet Labs, a not-for-profit that develops open source software for core Internet protocols, on scientific research.

Protecting against cyber risks is the domain of Cybersecurity. The Cyber CNI Speaker series wants to raise awareness and understanding of cybersecurity topics. It wants to enable a continuous dialog between experts from industry and academia and the general public, including individuals, families, companies from small to large sizes, and public bodies – in short everyone, since cybersecurity is relevant for each of us.

The Cyber CNI speaker series is a free monthly event on the last Wednesday of the month from 17h-18h30. The event consists of an expert talk of about 40 minutes followed by 30 minutes discussion.

The events happen in the Grand Amphitheatre at IMT Atlantique in Rennes (Cesson-Sévigné) AND are broadcasted live over Youtube (talk.cybercni.fr/), enabling global remote participation and including a tool for participating in the discussion.
You are cordially invited to participate. Please safe the dates and subscribe to receive email notifications!