Quantum Computing and Resilience

Overview

• Quantum technology uses the unique properties of quantum mechanics—such as superposition and entanglement—to perform computations far more efficiently than traditional computers, allowing quantum bits (qubits) to exist in multiple states simultaneously and execute many calculations at once. While this capability offers tremendous potential for breakthroughs in various fields, it also presents significant cybersecurity challenges, including the risk of undermining current cryptographic protections, enabling unauthorised decryption, and facilitating forgery.
• Australia is actively addressing these challenges by developing technologies designed to resist threats posed by quantum computing. Key areas of focus include quantum key distribution (QKD) for enhancing secure communication and post-quantum cryptography (PQC), which aims to protect data against future quantum-based attacks.

Domestic Strategic and Regulatory Framework

AUKUS

• AUKUS is a trilateral security alliance involving Australia, the United Kingdom, and the United States. Its goal is to foster a secure and stable Indo-Pacific region that remains free and open.
• It includes arrangements for sharing quantum technologies. In 2022, Australia and the UK agreed to collaborate on quantum research, expertise, and investment, following a similar agreement with the US in 2021.

National Quantum Strategy

The Australian government introduced the National Quantum Strategy in May 2023 to strengthen Australia's quantum technology capabilities, with an underlying focus on economic growth and national security. The strategy positions Australia as a leader in quantum technology by developing advanced quantum computing and communication systems, setting new cryptographic standards to counter quantum computing threats, and supporting ongoing research and innovation. It aligns with other relevant legislation, including the Security of Critical Infrastructure Act 2018 and the Telecommunications Act 1997.

2023-2030 Australian Cyber Security Strategy

• The Strategy is described in more detail here. It addresses the security challenges quantum computing poses to existing systems that protect information and includes updates and preparations to ensure these systems can handle advancements in quantum computing.
• A key component of this strategy, "Shield 10," focuses on the public sector, establishing standards for cryptography that can resist quantum computing threats. This initiative also includes updates to the Information Security Manual (“ISM“), providing organisations with guidance on improving their security measures in response to new technologies.

Security of Critical Infrastructure Act 2018 (Cth)

• This Act is described in more detail here. It provides a structured approach to managing the security of critical infrastructure, protecting essential services from threats such as sabotage and espionage.
• The Act requires organisations managing critical infrastructure to report cybersecurity incidents, maintain comprehensive risk management programs, and allows for government intervention during significant cyber threats. The Act is designed to be flexible, accommodating emerging threats, including those posed by quantum technologies.

Telecommunications Act 1997 (Cth)

• This Act is described in more detail here.  It outlines the responsibilities of telecommunication carriers and service providers to protect their networks from unauthorised access and to assist law enforcement in maintaining network security. It includes provisions for the lawful interception of communications. 
• As quantum technology introduces new encryption methods, the Act may require updatiing to ensure continued security and integrity in telecommunications.

Telecommunications (Interception and Access) Act 1979 (Cth)

• This Act is described in more detail here.  It regulates the lawful interception and access of telecommunication systems by law enforcement and security agencies to perform their duties.
• As with the Telecommunications Act, the Telecommunications (Interception and Access) Act may require adjustments to maintain efficacy as quantum technology evolves.

International Comparisons

European Union (EU)

The EU does not have specific laws governing quantum technology but is working on improving cybersecurity responses through initiatives like the Cyber Solidarity Act and the Quantum Flagship program, which facilitates collaboration among industry, governments, and academia to advance quantum technologies.

India

• India does not yet have specific laws for quantum technology, but existing regulations govern the export and management of dual-use quantum technologies.
• It has launched the National Quantum Mission to increase funding and research in quantum technologies. This mission focuses on developing secure quantum communication systems and fostering collaboration between the public and private sectors.

United Kingdom (UK)

• The UK invests heavily in quantum research and applications through the National Quantum Technologies Programme and the National Quantum Strategy. The National Quantum Computing Centre unites businesses, researchers, and government to strengthen the country's competitive position in the global quantum industry.
• The UK is also actively involved in international efforts to establish standards for quantum technology, contributing to global discussions on how to manage and regulate these advancements.

United States (US)

• The National Quantum Initiative in the US coordinates quantum research and policy across various government agencies. The Quantum Economic Development Consortium (QED-C) brings together government, academia, and industry stakeholders to identify and address gaps in technology, standards, and workforce development through collaborative efforts.
• Additionally, the Quantum Computing Cybersecurity Preparedness Act requires US federal agencies to prepare for quantum-resistant cryptographic technologies, ensuring they are ready to protect against future quantum computing threats.

Other Resources

• Susanne Lloyd-Jones and Kayleen Manwaring, Quantum Resilience in the Australian National Security Legislative Framework (SOCRATES WP8 CSCRC Policy Brief) (Report, UNSW Sydney, 22 June 2024).
• Allens, Making the Quantum Computing Leap (Web Page, 17 July 2023).
• Jarryd Daymond, Australia Has a National Quantum Strategy. What Does That Mean? (Web Page, 10 May 2023).