Telecom networks are undergoing a rapid transformation. On the one hand, we are witnessing the rise of IoT, mass migration to cloud-based services, and a constantly growing demand for faster speeds. On the other, cyber threats are increasing in number while evolving to become more sophisticated. Unfortunately, even the biggest names in the industry still fall victim to hacking and malicious attacks, highlighting the crucial need for robust encryption that can stand up not only to the cyber threats of today but those that will emerge in the post-quantum world.
Random numbers underpin modern encryption, ensuring the security of data and communications by enabling the generation of unpredictable encryption keys. Traditional methods for generating these numbers, such as hardware-based random number generators (RNGs) and software-based pseudo-random number generators (PRNGs), suffer from inherent weaknesses. These include the difficulty of verifying the quality of randomness use for encryption keys and the growing challenge around entropy shortages.
It is exceedingly difficult to verify or quantify the randomness produced by these existing methods, particularly over long operational periods. This has led to failures in randomness generation, resulting in vulnerabilities that have had significant consequences for cybersecurity systems. An example of this is the announcement Cisco made that one of its firewall systems – which is one of the most commonly used around the world – had a vulnerability caused by insufficient randomness. This was the second time a vulnerability had been discovered in five years. And as encryption methods become more complex, the demand for high-quality entropy – or true randomness – increases significantly. Traditional methods struggle to meet these demands, particularly in the context of quantum-safe encryption and post-quantum cryptography.
Why is high-quality randomness crucial for telecom security?
Several key trends highlight the growing need for verifiably high-quality randomness in telecoms. Firstly, Post-Quantum Cryptography (PQC) algorithms require significantly larger key sizes than classical encryption methods, demanding considerably higher-quality entropy.
Secondly, symmetric encryption algorithms, like advanced encryption standards (AES), also need sufficient entropy for their larger keys. Without it, these systems are vulnerable to quantum computer-based attacks, such as Grover’s Search.
Thirdly, the current methods for generating keys are vulnerable to quantum-based attacks, making them unsuitable for the quantum era.
How can the telecom industry ensure verifiable, high-quality randomness for encryption?
To address the growing need for generating and securely distributing true random numbers for encryption keys, Quantum Dice has developed its cloud-based Quantum Entropy-as-a-Service (QEaaS) solution that is backed by its patented DISC™ protocol.
DISCTM allows for continuous, real-time verification of entropy, ensuring the highest quality randomness at all times. This means the QRNG provides robust and reliable randomness, even in challenging operating conditions. By leveraging quantum mechanics to provide genuine randomness, this unique approach has a clear advantage over alternative methods.
QEaaS is designed for easy consumption and seamless integration with any device, and users can either host their own QRNG hardware or simply subscribe to QEaaS remotely.
See QEaaS in action at MWC Barcelona
Join us at MWC Barcelona at the GSMA Pavilion in Hall 4 for a live demo of QEaaS securing a DQKD VPN and discover how:
- QEaaS can enhance the security of critical telecom network components
- Carrier-grade infrastructure can be leveraged as a crypto-agile Entropy-as-a-Service platform
- QEaaS provides a continuous supply of high-quality entropy, essential for securing resource-limited devices and cloud instances
- The DISC™ protocol reacts in real-time to provide ultimate security
We’ll be showcasing how the deployment of QEaaS can enhance telecom security and provide a lasting, resilient solution to the entropy crisis — one that is needed now, not just in a post-quantum world. Don’t miss this opportunity to explore the cutting edge of quantum-enhanced security. We look forward to seeing you there!
