Lifeboat Foundation

Quantum key distribution (QKD)^1,2,3 is a theoretically secure way of sharing secret keys between remote users. It has been demonstrated in a laboratory over a coiled optical fibre up to 404 kilometres long^4,5,6,7. In the field, point-to-point QKD has been achieved from a satellite to a ground station up to 1,200 kilometres away^8,9,10. However, real-world QKD-based cryptography targets physically separated users on the Earth, for which the maximum distance has been about 100 kilometres^11,12. The use of trusted relays can extend these distances from across a typical metropolitan area^13,14,15,16 to intercity¹⁷ and even intercontinental distances¹⁸. However, relays pose security risks, which can be avoided by using entanglement-based QKD, which has inherent source-independent security^19,20. Long-distance entanglement distribution can be realized using quantum repeaters²¹, but the related technology is still immature for practical implementations²². The obvious alternative for extending the range of quantum communication without compromising its security is satellite-based QKD, but so far satellite-based entanglement distribution has not been efficient²³ enough to support QKD. Here we demonstrate entanglement-based QKD between two ground stations separated by 1,120 kilometres at a finite secret-key rate of 0.12 bits per second, without the need for trusted relays. Entangled photon pairs were distributed via two bidirectional downlinks from the Micius satellite to two ground observatories in Delingha and Nanshan in China. The development of a high-efficiency telescope and follow-up optics crucially improved the link efficiency. The generated keys are secure for realistic devices, because our ground receivers were carefully designed to guarantee fair sampling and immunity to all known side channels^24,25. Our method not only increases the secure distance on the ground tenfold but also increases the practical security of QKD to an unprecedented level.

A pair of new security threats to Intel-based computer systems have been revealed. The beleaguered semiconductor chip manufacturer has faced a seemingly endless series of vulnerabilities over the past two years.

Although no known attacks have occurred, two teams of researchers have confirmed vulnerabilities in what is supposed to be the safest neighborhood within Intel processor architecture.

One attack, dubbed SGAxe, can gain entry into Intel’s Software Guard eXtensions (SGX) services that were specifically designed to protect critical data in the event of massive assault elsewhere in a system. A hacker theoretically can steal cryptographic keys stored in SGX and use them to break security measures protecting sensitive data such as financial records, copyrighted content or passwords.

Many consumers may have heard of blockchain technology, especially in relation to cryptocurrency. However, they may not be aware of its full potential and impact across industries. Blockchain has the potential to simplify and add greater security to data management, and since its inception, this technology has quietly been changing business processes.

To get further insights, we asked the members of Forbes Technology Council to share some ways blockchain has changed (or will soon change) business. Their best answers are below.

Photo:

Continue reading “13 Evolving And Emerging Uses For Blockchain Technology” »

“Once a chip is designed, adding security after the fact or making changes to address newly discovered threats is nearly impossible,” explains a DARPA spokesperson.

Circa 2007

This chapter describes detection of explosives by terahertz Imaging ™. There has been an amplified interest in terahertz (THz) detection for imaging of covered weapons, explosives, chemical and biological agents. THz radiation is readily transmitted through most nonmetallic and nonpolar mediums. This process enables the THz systems to see through concealing barriers, which includes packaging, corrugated cardboard, clothing, shoes, book bags, and such others to find potentially dangerous materials concealed within. Apart from many materials of interest for security applications, which include explosives, chemical agents, and other such biological agents that have characteristic THz spectra which can be used for fingerprint testing and identify concealed materials. The Terahertz radiation poses either no or minimal health risk to either a suspect being scanned by a THz system or the system’s operator. As plastic explosives, fertilizer bombs, and chemical and biological agents increasingly become weapons of war and terrorism, and the trafficking of illegal drugs increasingly develops as a systemic threat, effective means for rapid detection, and an identification of these threats are required. One proposed solution for locating, detecting, and characterizing concealed threats is to use THz electromagnetic waves to spectroscopically detect and identify concealed materials through their characteristic transmission or reflectivity spectra in the range of 0.5–10 THz.

Circa 2019

A full-body scanner that the Transportation Security Administration hopes can speed up airport security checkpoints must go back to the drawing board for software to protect the privacy of travelers being scanned.

The scanner, built by British firm Thruvision, was promoted as being able to simultaneously screen multiple airport passengers from a distance of up to 25 feet away. The TSA began trying out the device last year at an Arlington, Va., testing facility before planning to use it on a trial basis at U.S. airports.

Continue reading “TSA says an airport full-body scanner must add a filter to protect travelers’ privacy” »

Decoherence is the bane of quantum technologies. In coherent systems, the phase of the wave functions representing the quantum states of particles in the system have definite relations between each other. This allows quantum devices to operate in a meaningful way that differs from classical devices. However, interacting with the world around us rapidly leads to decoherence, which makes it harder to exploit quantum effects for enhancing computation efficiency or communication security. Research has shown that quantum systems with impressively long coherence times are possible in diamond, but diamond is far from the favorite for manufacturers. Now, researchers at the University of Science and Technology in Hefei and Wuhan University in China have demonstrated SiC can boast some of the quantum merits of diamond with the additional advantage of optical control at the wavelengths used by the telecommunications industry.

The defects prized for quantum technologies are nitrogen-vacancy (NV) centers, in which a carbon atom in diamond is replaced by a nitrogen with a missing carbon at the neighboring crystal lattice site. What makes this kind of defect interesting for quantum technologies is that you can control its quantum spin states with light and produce photon-spin entanglement with long coherence times, even at room temperature. The difficulties arise when trying to position the technology in the real world as opposed to the lab. The photon-spin interactions for NV centers in diamond need light at visible wavelengths—telecommunications wavelengths are much longer. In addition, these finely engineered devices need to be hacked out of one of the hardest (and most expensive) materials known to man, one that industry does not have established nanofabrication protocols for.

It turns out there are types of defects in SiC that might also be useful for quantum technologies. SiC is widely used in power electronics, so commercially viable avenues for producing SiC devices already exist. Over the past 10 years, vacancies and divacancies (where one or a pair of atoms in the lattice are absent) in SiC began to attract interest when researchers learned that they could also control their spin states with light at room temperature with long coherence times. The observation of NV centers in SiC really piqued interest, as these were optically active at the wavelengths used by the telecommunications industry as opposed to the shorter visible wavelengths needed to control the spin states of vacancies and divacancies in SiC.

As far back as 2015, the National Institute of Standards and Technology (NIST) began asking encryption experts to submit their candidate algorithms for testing against quantum computing’s expected capabilities — so this is an issue that has already been front of mind for security professionals and organizations. But even with an organization like NIST leading the way, working through all those algorithms to judge their suitability to the task will take time. Thankfully, others within the scientific community have also risen to the challenge and joined in the research.

It will take years for a consensus to coalesce around the most suitable algorithms. That’s similar to the amount of time it took ECC encryption to gain mainstream acceptance, which seems like a fair comparison. The good news is that such a timeframe still should leave the opportunity to arrive at — and widely deploy — quantum-resistant cryptography before quantum computers capable of sustaining the number of qubits necessary to seriously threaten RSA and ECC encryption become available to potential attackers.

The ongoing development of quantum-resistant encryption will be fascinating to watch, and security professionals will be sure to keep a close eye on which algorithms and encryption strategies ultimately prove most effective. The world of encryption is changing more quickly than ever, and it has never been more important for the organizations dependent on that encryption to ensure that their partners are staying ahead of the curve.

As Internet of Things (IoT) devices rapidly increase in popularity and deployment, economic attackers and nation-states alike are shifting their attention to the vulnerabilities of digital integrated circuit (IC) chips. Threats to IC chips are well known, and despite various measures designed to mitigate them, hardware developers have largely been slow to implement security solutions due to limited expertise, high cost and complexity, and lack of security-oriented design tools integrated with supporting semiconductor intellectual property (IP). Further, when unsecure circuits are used in critical systems, the lack of embedded countermeasures exposes them to exploitation. To address the growing threat this poses from an economic and national security perspective, DARPA developed the Automatic Implementation of Secure Silicon (AISS) program. AISS aims to automate the process of incorporating scalable defense mechanisms into chip designs, while allowing designers to explore chip economics versus security trade-offs based on the expected application and intent while maximizing designer productivity.

Today, DARPA is announcing the research teams selected to take on AISS’ technical challenges. Two teams of academic, commercial, and defense industry researchers and engineers will explore the development of a novel design tool and IP ecosystem – which includes tool vendors, chip developers, and IP licensors – allowing, eventually, defenses to be incorporated efficiently into chip designs. The expected AISS technologies could enable hardware developers to not only integrate the appropriate level of state-of-the-art security based on the target application, but also balance security with economic considerations like power consumption, die area, and performance.

“The ultimate goal of the AISS program is to accelerate the timeline from architecture to security-hardened RTL from one year, to one week – and to do so at a substantially reduced cost,” said the DARPA program manager leading AISS, Mr. Serge Leef.