Quantum Computing and Resilience

Overview

• Quantum technology uses the unique properties of quantum mechanics—such as superposition and entanglement—to perform computations far more efficiently than traditional computers, allowing quantum bits (qubits) to exist in multiple states simultaneously and execute many calculations at once. While this capability offers tremendous potential for breakthroughs in various fields, it also presents significant cybersecurity challenges, including the risk of undermining current cryptographic protections, enabling unauthorised decryption, and facilitating forgery.
• Australia is actively addressing these challenges by developing technologies designed to resist threats posed by quantum computing. Key areas of focus include quantum key distribution (QKD) for enhancing secure communication and post-quantum cryptography (PQC), which aims to protect data against future quantum-based attacks.

Domestic Strategic and Regulatory Framework

AUKUS

• AUKUS is a trilateral security alliance involving Australia, the United Kingdom, and the United States. Its goal is to foster a secure and stable Indo-Pacific region that remains free and open.
• It includes arrangements for sharing quantum technologies. In 2022, Australia and the UK agreed to collaborate on quantum research, expertise, and investment, following a similar agreement with the US in 2021.

National Quantum Strategy

2023-2030 Australian Cyber Security Strategy

• The Strategy is described in more detail here. It addresses the security challenges quantum computing poses to existing systems that protect information and includes updates and preparations to ensure these systems can handle advancements in quantum computing.
• A key component of this strategy, "Shield 10," focuses on the public sector, establishing standards for cryptography that can resist quantum computing threats. This initiative also includes updates to the Information Security Manual (“ISM“), providing organisations with guidance on improving their security measures in response to new technologies.

Security of Critical Infrastructure Act 2018 (Cth)

• This Act is described in more detail here. It provides a structured approach to managing the security of critical infrastructure, protecting essential services from threats such as sabotage and espionage.
• The Act requires organisations managing critical infrastructure to report cybersecurity incidents, maintain comprehensive risk management programs, and allows for government intervention during significant cyber threats. The Act is designed to be flexible, accommodating emerging threats, including those posed by quantum technologies.

Telecommunications Act 1997 (Cth)

• This Act is described in more detail here.   It outlines the responsibilities of telecommunication carriers and service providers to protect their networks from unauthorised access and to assist law enforcement in maintaining network security. It includes provisions for the lawful interception of communications.  
• As quantum technology introduces new encryption methods, the Act may require updatiing to ensure continued security and integrity in telecommunications.

Telecommunications (Interception and Access) Act 1979 (Cth)

• This Act is described in more detail here.   It regulates the lawful interception and access of telecommunication systems by law enforcement and security agencies to perform their duties.
• As with the Telecommunications Act, the Telecommunications (Interception and Access) Act may require adjustments to maintain efficacy as quantum technology evolves.

International Comparisons

Australia

• In addition to the information in the previous section, a comprehensive review of Australia's quantum strategy, policy and regulation can be found here: Appendix A Australian quantum regulation and policy.pdf

European Union (EU)

• The EU does not have specific laws governing quantum technology but is working on improving cybersecurity responses through initiatives like the Cyber Solidarity Act and the Quantum Flagship program, which facilitates collaboration among industry, governments, and academia to advance quantum technologies.
• A comprehensive review of the EU's quantum strategy, policy and regulation can be found here: Appendix B EU Quantum Regulation and Policy.pdf

India

• India does not yet have specific laws for quantum technology, but existing regulations govern the export and management of dual-use quantum technologies.
• It has launched the National Quantum Mission to increase funding and research in quantum technologies. This mission focuses on developing secure quantum communication systems and fostering collaboration between the public and private sectors.
• A comprehensive review of India's quantum strategy, policy and regulation can be found here: Appendix C India Quantum policy and regulation.pdf

United Kingdom (UK)

• The UK invests heavily in quantum research and applications through the National Quantum Technologies Programme and the National Quantum Strategy. The National Quantum Computing Centre unites businesses, researchers, and government to strengthen the country's competitive position in the global quantum industry.
• The UK is also actively involved in international efforts to establish standards for quantum technology, contributing to global discussions on how to manage and regulate these advancements.
• A comprehensive review of the UK's quantum strategy, policy and regulation can be found here: Appendix D UK Quantum policy and regulation.pdf

United States (US)

• The National Quantum Initiative in the US coordinates quantum research and policy across various government agencies. The Quantum Economic Development Consortium (QED-C) brings together government, academia, and industry stakeholders to identify and address gaps in technology, standards, and workforce development through collaborative efforts.
• Additionally, the Quantum Computing Cybersecurity Preparedness Act requires US federal agencies to prepare for quantum-resistant cryptographic technologies, ensuring they are ready to protect against future quantum computing threats.
• A comprehensive review of the US's quantum strategy, policy and regulation can be found here: Appendix E USA Quantum policy and regulation.pdf

Other Resources

• Marchant, Gary E. and Bazzi, Rida and Bowman, Diana and Connor, Justin and Davis III, Royal Aubrey and Kang, Eunmi and Konkoly-Thege, Kaniah and Liu, David and Lloyd-Jones, Susanne and Manwaring, Kayleen and Bennett Moses, Lyria and Marchant, Megan, 'Learning From Emerging Technology Governance for Guiding Quantum Technology' (August 09, 2024). Arizona State University Sandra Day O'Connor College of Law Paper No. 4923230, UNSW Law Research Paper No. 24-33, (Working Paper) Available at SSRN: https://ssrn.com/abstract=4923230 or http://dx.doi.org/10.2139/ssrn.4923230 or download as a pdf here: Learning from Emerging Technology Governance.pdf.
• Lloyd-Jones, Susanne and Kayleen Manwaring, 'First Steps to Quantum Resilience: Identifying ‘Broken Concepts’ in Australia’s National Security Laws' ANU Journal of Law and Technology (JOLT) (forthcoming)
  
• Lloyd-Jones, Susanne and Kayleen Manwaring, 'Quantum Resilience in the Australian National Security Legislative Framework.pdf' (Policy Brief, Cyber Security Cooperative Research Centre, UNSW Faculty of Law & Justice, September 2024)
• Lloyd-Jones, Susanne and Kayleen Manwaring, ‘Quantum tech is a high-stakes gamble. Here’s how Australia can find a way forward’ (2024) The Conversation.
• Allens, Making the Quantum Computing Leap (Web Page, 17 July 2023).
• Jarryd Daymond, Australia Has a National Quantum Strategy. What Does That Mean? (Web Page, 10 May 2023).