#USA #Cybersecurity #Commvault #Tinton Falls #Post-Quantum Cryptography

Commvault Strengthens Data Protection with Advanced Post-Quantum Cryptography

As quantum computing continues to evolve, organizations worldwide are facing unprecedented security challenges. Commvault, a leader in cyber resilience and data protection solutions, is at the forefront of this battle. Recently, they announced significant enhancements to their post-quantum cryptography (PQC) capabilities, aimed at helping customers safeguard their sensitive data from emerging quantum threats.

Understanding the Quantum Threat

Quantum computing utilizes quantum mechanics to process information, allowing it to solve complex problems remarkably faster than traditional computers. However, this technological leap poses potential risks, as it may enable malicious actors to decrypt existing encryption methods.

A recent poll by the Information Systems Audit and Control Association (ISACA) revealed that a staggering 63% of technology and cybersecurity professionals believe quantum computing will fundamentally alter cybersecurity risks. In light of this, preparing for such advancements is crucial. Many organizations may need to rethink their data protection strategies to account for the impending quantum era.

Commvault’s Commitment to Security

Commvault has been proactive in its response to the quantum dilemma. As of August 2024, they incorporated support for quantum-resistant encryption standards recommended by the National Institute of Standards and Technology (NIST), including CRYSTALS-Kyber, CRYSTALS-Dilithium, SPHINCS+, and FALCON. This initiative was propelled by their introduction of a cryptographic agility framework, designed to help clients adapt without needing to overhaul their systems.

The latest update from Commvault introduces support for the Hamming Quasi-Cyclic (HQC) algorithm, specifically engineered to combat threats such as the ‘harvest now, decrypt later’ approach. This tactic allows adversaries to capture encrypted data, storing it until they have sufficient quantum computing power to decrypt it.

According to Bill O’Connell, Commvault’s Chief Security Officer, “The quantum threat isn't theoretical. Our integration of new algorithms, such as HQC, equips our customers with essential tools to navigate this complex landscape confidently.” This initiative is vital for industries with lengthy data retention requirements, such as finance and healthcare, where safeguarding sensitive information is paramount.

Simplifying Implementation for Clients

Commvault’s expanded PQC framework not only emphasizes the need for enhanced safety measures but also focuses on user-friendliness. Their Risk Analysis capabilities assist organizations in identifying critical data areas where cryptographic enhancements could be beneficial. Furthermore, these new features can often be activated with simple configurations, minimizing disruption to ongoing operations.

Phil Goodwin, Research VP at IDC, stresses the urgency of addressing these quantum threats, stating, “Quantum readiness has become a business imperative, particularly for industries handling sensitive data.” Organizations must act quickly to secure their future against the evolving cyber landscape that quantum technology presents.

A Robust Partnership in Cyber Resilience

Commvault’s leadership in adopting quantum-resistant cryptography has positioned them as a crucial ally for organizations aiming to establish a robust cyber resilience strategy. Numerous organizations, such as the Nevada Department of Transportation and the British Medical Association, have commended Commvault for their swiftness in integrating NIST’s standards.

Jeff Day, Deputy Chief Information Security Officer for Nevada's Department of Transportation, noted, “Commvault has been an invaluable partner... their leadership in adopting post-quantum cryptography, combined with their crypto-agility framework, is exactly what we need.”

Peter Hands, CISO of the British Medical Association, echoed similar sentiments, highlighting the importance of Commvault’s commitment to easing the implementation of advanced cybersecurity solutions.

Conclusion: A Future-Ready Data Protection Strategy

Commvault’s post-quantum cryptography capabilities, including support for the dynamic HQC algorithm, are now available to all Commvault Cloud users running the latest software versions. This seamless integration is crucial for organizations looking to fortify their data security in an age where quantum computing vulnerabilities loom large. As we adapt to these technological advancements, Commvault remains dedicated to helping clients future-proof their data protection strategies, enabling them to face the quantum challenges ahead with confidence.