Commvault expands post-quantum cryptography with support for HQC algorithm – News

Data protection provider Commvault Systems Inc. today announced new post-quantum cryptography capabilities designed to help customers protect data from emerging quantum security threats.

The new PQC capabilities protect highly sensitive, long-term data from a new generation of imminent but unknown cyber threats, creating an additional layer of support when needed.

The emerging field of quantum computing promises to process data and solve complex problems that could take decades with classical computers. Though the technology will drive tech development and discovery forward, there is also the potential for threat actors to use quantum computing to decipher and unlock traditional encryption methods.

Commvault has provided support for quantum-resistant encryption standards, like CRYSTALS-Kyber, CRYSTALS-Dilithium, SPHINCS+ and FALCON, as recommended by the National Institute of Standards and Technology since August 2024. At the same time, Commvault also introduced a cryptographic agility framework that allows its customers to address rapidly evolving threats without overhauling their systems via the Commvault Cloud platform.

Today’s announcement sees Commvault build on its existing PQC framework by adding support for Hamming Quasi-Cyclic, a new error-correcting code-based algorithm designed to defend against threats like “harvest now, decrypt later,” a method where adversaries intercept encrypted network traffic and store it for a later time when quantum computers are powerful enough to decrypt it.

“The quantum threat isn’t theoretical,” said Chief Security Officer Bill O’Connell. “We were among the first cyber resilience vendors to address post-quantum computing and by integrating new algorithms like HQC and advancing our crypto-agility framework, we are providing our customers with the tools to navigate this complex landscape with confidence. Our goal is simple and clear: as quantum computing threats emerge, we intend to help our customers keep their data protected.”

Commvault’s expanded post-quantum cryptography capabilities provide access to various safeguards that can help fortify network tunnels against quantum-based attacks. Using Commvault’s Risk Analysis capabilities, customers can discover and classify data to determine where these cryptographic capabilities may be helpful.

The capabilities are simple to implement, with customers able to deploy protection using a checkbox configuration, making it easy to utilize when needed.

Commvault’s post-quantum cryptography capabilities, including support for NIST’s HQC algorithm, are immediately available to all Commvault Cloud customers running software version CPR 2024 (11.36) and later.

Image: News/Reve