IBM Looks to Balance Quantum Innovation and Cybersecurity
Summary Bullets:
• IBM leads the quantum compute (QC) race with its 156-qubit machine leading, yet the technology is also causing significant cybersecurity concerns.
• While IBM is driving IBM Quantum Safe, investments in other areas are also important for addressing the ‘Known, Unknowns’ with managing emerging security threats.
IBM leads the QC race with its 156-qubit machine leading major rivals such as Google, Fujitsu, and Rigetti.
This latest machine can dimensionally space of 2 to the power of 156 states at the same time, which equates to a 47-digit number. QC is less of a novelty and gradually becoming commonplace. Unlike conventional computing, QC utilize the quantum mechanical principle of superposition, which stipulates that the quantum qubits, ‘qubits’, can be simultaneously in the states 0 and 1 and everything in-between unlike classical computers, which have only two possible binary states of 0 and 1. And through a process of entanglement, QC can see relationships between qubits, impossible on classical computers. This fresh approach brings massive parallelism to computing and promises to accelerate advances research into domains such as science and medicine as well as accelerating AI research.
The Treat to Cyber Defenses
The major discussion however has been the threat to cybersecurity. Namely, the fear that RSA 2048, a 2048-bit encryption key (a top standard for cryptography), for example, could be broken by Cryptographically Relevant Quantum Computers (CRQC) through massively parallel factorization using Shor’s algorithm on a day that is often referred to as “Q-Day”. This would take the best classic computer perhaps a billion years to do and speculatively months or days for QC. Who knows? There is fear that QC can escalate cyberattacks through fraudulent authentication accessing data, systems and applications. It can forge digital signatures, fake records, and compromise blockchain assets. And while nothing is on the market today, cyber adversaries can potentially steal sensitive data now as well as store and decrypt sensitive data when QC is mature.
IBM’s Approach for IBM Quantum Safe
The conversation is recognition that QC is evolving much faster than any previous time. IBM estimates its superconducting QC are between 1,200x to 70,000x cheaper to run, and between 400x to 2,000x faster than ion trap quantum computers. And while IBM is ahead in terms of having the largest computers, it is working with other businesses, government, and regulatory bodies to raise awareness. It is also looking to standardize quantum resistant algorithms. IBM, for example, played a leading and foundational role in three of four proposed NIST standards for post quantum cryptography (PQC). There is also quantum key distribution (QKD) to ensure the secure exchange of information between two or more parties continues in the quantum world. NIST has a 2030 recommendation for new quantum resistant cryptography to be in place. The EU, for example, is coordinating its Quantum roadmap. The switch over to post quantum is likely 2035.
While the impact of securing infrastructure and key distribution for all scenarios – Quantum Safe – will be far reaching, the IBM play is leadership in building the fastest quantum computers, including the processors, hardware, software, and middleware. This is also the experience in supporting industries, especially those regarded as critical national infrastructure (e.g., telecommunications, energy, utilities, banking, and payments), which tend to be highly regulated, rely on legacy systems, and require extra levels of security protection for compliance considerations.
IBM is working with enterprise on mapping cryptographic footprint and assets across systems and applications (e.g., source code, libraries) and network protocols (SSL and TLS). This is to better understand vulnerabilities, dependencies, current posture, before understanding where and how to apply IBM Quantum Safe principles. This is often done to align with compliance laws specific to industry verticals, including critical infrastructure. The company has 160,000 global consultants, has vibrant partner ecosystem working with the likes of Palo Alto Networks, for example, on threat detection and management. The vendor also has a play for quantum readiness.
While leading in overall quantum R&D is important, investments in adjacent many areas such as hybrid cloud, agentic AI, including multi-agent orchestration, will also have big implications for security as much as everything else. In the era of disaggregation, multi-domain experience and optionality will be important for tackling multiple issues, including the challenges with quantum. IBM is supporting its customers goals of being rigid on security, yet flexible on IT strategy and business agility.










