2363 TechXchange quantum safe encryption on IBM Z.pdf

1、October 21-24,2024Mandalay Bay Convention CenterLas Vegas,Nevada2363Rebecca Levesque21CS,Chief Revenue OfficerQuantum-Safe Data Set Encryption on z/OS:Now More Important Than Ever#IBMTechXchange22Copyright 2024 IBM Corporation#IBMTechXchangeUSD 300+million3Average cost of a“mega breach”involving 30M

2、-40M records*See https:/ for the full“Cost of Data Breach Report 2024”#IBMTechXchange4Why is the time to act now?Encrypted data lost during a data breachData communications over TLS that have been harvestedSnapshots of encrypted cloud data Media that is not encrypted with quantum-safe encryption met

3、hods and is improperly disposed or lostEncryption systems using blackened(wrapped)encryption keys that are publicData must be protected with strong encryption algorithms like AES using 256-bit keys to be considered quantum-safe Data is being stolen today with the intent of exposing it tomorrowCopyri

4、ght 2024 IBM Corporation#IBMTechXchangeCPACFCrypto Express 8S(CEX8S)TKE WorkstationHigh performance key calculationsHigh security key calculationsSimplified&secure Master Key usageQuantum-safe encryption componentsCopyright 2024 IBM Corporation 5#IBMTechXchangeCrypto Express 8S(CEX8S)ICSF support of

5、 CRYSTALSCopyright 2024 IBM Corporation CRYSTALS-Dilithium was first introduced on the z15,but as the NIST evaluation of quantum-safe algorithms continues,new“rounds”of the submitted algorithms are introduced.When the CRYSTAL-Dilithium algorithm progressed to“Round 3”of the evaluation,updates to the

6、 key generation algorithms were added.The CEX8 coprocessor added support for the new Round 3 keys,and also added a(8,7)key size in addition to the(6,5)key size previously available.CRYSTAL-Kyber is a new key type available on the z16 with the CEX8 Coprocessor.When used in combination with Elliptic C