Fortanix Enhances Data-First Security Platform to Secure Against Escalating AI and Quantum Computing Threats
**Abstract: Fortanix Enhances Data-First Security Platform to Secure Against Escalating AI and Quantum Computing Threats** **Key Events:** - Fortanix, a leader in data-first cybersecurity and a pioneer in Confidential Computing, announced significant enhancements to its data encryption and key management platform. - The company integrated the latest quantum-resistant cryptographic algorithms (CNSA 2.0) recommended by the NSA and NIST to protect against quantum computing threats. - These updates are crucial as quantum computers are expected to break most widely used public key cryptographic algorithms, exposing sensitive data to future risks. - Fortanix’s platform now supports a suite of advanced algorithms including Leighton-Micali Signature (LMS), Xtended Merkle Signature Scheme (XMSS), Advanced Encryption Standard (AES), Secure Hash Algorithm (SHA), CRYSTALS-Kyber (ML-KEM), and CRYSTALS-Dilithium (ML-DSA). **People:** - Anuj Jaiswal, Chief Product Officer at Fortanix, highlighted the complexity of transitioning to post-quantum cryptography (PQC) and the platform's capabilities in managing cryptographic assets. - Tomas Gustavsson, Chief Public Key Infrastructure Officer at Keyfactor, emphasized the urgency of the PQC transition and the partnership with Fortanix to equip organizations with the necessary tools. **Locations:** - The announcement was made from Santa Clara, California, underscoring Fortanix's presence in a tech-savvy region known for innovation in cybersecurity and computing. **Time Elements:** - The NSA and NIST introduced new quantum-resistant cryptographic algorithms in the last quarter. - The U.S. government's NSM-10 mandates agencies to develop a transition plan within one year of updated standards, with full migration by 2035. - NIST has set firm deadlines for the initial adoption of PQC by 2030 and a complete phase-out of legacy algorithms by 2035. - PCI DSS 4.0, which becomes effective in April 2025, requires strict adherence to secure cryptographic protocols. **Summary:** Fortanix, a prominent player in data-first cybersecurity and Confidential Computing, has introduced new features to its data encryption and key management platform to counter the emerging threats posed by artificial intelligence (AI) and quantum computing. These advancements are particularly timely as quantum computers are projected to break most current public key cryptographic algorithms, thereby jeopardizing the security of long-term sensitive data. This includes customer information, personally identifiable information (PII), employee records, and proprietary company and product details, which are increasingly targeted by cybercriminals who store encrypted data with the intent to decrypt it once quantum computing becomes feasible. In response to the escalating risks, the National Security Agency (NSA) and the National Institute of Standards and Technology (NIST) have recently released a new set of quantum-resistant cryptographic algorithms (CNSA 2.0). Fortanix has swiftly integrated these algorithms into its platform, offering support for Leighton-Micali Signature (LMS), Xtended Merkle Signature Scheme (XMSS), Advanced Encryption Standard (AES), Secure Hash Algorithm (SHA), CRYSTALS-Kyber (ML-KEM), and CRYSTALS-Dilithium (ML-DSA). This integration ensures that companies using the Fortanix platform are better prepared to mitigate the risks and associated costs of advanced AI and quantum computing threats. Moreover, the platform's enhancements are aligned with regulatory compliance requirements. The U.S. government's National Security Memorandum 10 (NSM-10) mandates that federal agencies develop a plan to transition to new cryptographic standards within one year of their release, with a full migration expected by 2035. Additionally, the Payment Card Industry Data Security Standard (PCI DSS) 4.0, set to take effect in April 2025, imposes stringent adherence to secure cryptographic protocols. By adopting the Fortanix platform, organizations can accelerate their compliance with these regulations, ensuring a smoother and more secure transition. Anuj Jaiswal, Fortanix's Chief Product Officer, noted the complexity of the PQC transition journey, particularly the challenge of understanding where and how cryptography is applied within an organization. He highlighted that most enterprises lack immediate visibility into their cryptographic footprint, making it difficult to assess the risk of non-quantum-resistant cryptographic assets. Fortanix's platform addresses this issue by providing tools for discovering and assessing these risks, as well as achieving the necessary crypto agility for a large-scale PQC transition. Tomas Gustavsson, Chief Public Key Infrastructure Officer at Keyfactor, a partner of Fortanix, stressed the importance of acting now to prepare for quantum threats. The deadlines set by NIST—2030 for initial adoption and 2035 for full phase-out of legacy algorithms—are designed to ensure that all organizations are proactive in their PQC readiness. Keyfactor and Fortanix are collaborating to provide organizations with the tools needed to stay ahead of this critical shift and securely manage their data in the face of evolving technological threats. **Additional Resources:** - Fortanix's post-quantum readiness page - Solution brief on future-proofing post-quantum data risks - Whitepaper titled “Preparing for Post-Quantum Cryptography” **About Fortanix:** Fortanix is a global leader in data-first cybersecurity and a pioneer in Confidential Computing. The company's platform revolutionizes data security by offering a unified, scalable solution for managing data encryption and key management across on-premises and multi-cloud environments. Fortanix's technology is designed to secure data at rest, in transit, and in use, thereby reducing the impact of breaches, enabling PQC readiness, simplifying compliance with global data privacy and security regulations, and lowering operational complexity and total cost of ownership. Trusted by leading brands and government agencies, Fortanix continues to innovate and provide robust security solutions in an ever-evolving digital landscape. For more information, visit www.fortanix.com.
