The Office of Information and Technology (OIT) within U.S. Customs and Border Protection (CBP) is addressing the challenges posed by quantum computing to national security. As part of the Department of Homeland Security, CBP OIT plays a vital role in safeguarding critical infrastructure against sophisticated cyber threats, blocking approximately 100 million network cyber attempts daily.
Quantum computing, leveraging principles of quantum mechanics for faster calculations, poses risks to current cryptographic practices that protect sensitive data. "CBP is one of the first federal agencies to explore post-quantum cryptography to harden security within its systems," stated CBP Chief Information Officer Sonny Bhagowalia. He emphasized the necessity of strengthening data through post-quantum encryption now to prepare for future security threats.
Post-quantum cryptography (PQC) has gained attention from the federal government, highlighted by initiatives like the Office of Management and Budget Memorandum M-23-02 and the Quantum Computing Cybersecurity Preparedness Act. PQC aims to address threats where adversaries collect encrypted data now with plans to decrypt it later using advanced quantum computing.
Dr. Ed Mays, OIT Deputy Assistant Commissioner, explained, “Once previously protected data is made clear and readable through quantum decryption, it can be exposed, potentially leading to espionage, financial fraud, and other malicious activities with potential implications for national security and prosperity.”
In November 2022, CBP launched a Quantum Safe Risk Framing Workshop as part of their Zero Trust Architecture implementation strategy. This workshop included key personnel from various organizations within DHS and was instrumental in identifying cryptographic systems requiring transition to PQC.
The workshop also led to a PQC proof of concept completed in November 2023. This project helped understand the transition timeline and technical details necessary for adopting quantum-resistant algorithms. In August 2024, technologies such as CRYSTALS-Kyber key encapsulation and CRYSTALS-Dilithium digital signature algorithm received approval from the National Institute of Standards and Technology (NIST), which CBP had already tested.
CBP continues leading efforts in securing data against emerging threats while supporting its officers and agents around-the-clock. The agency remains committed to enhancing border protection capabilities effectively.
U.S. Customs and Border Protection is America's largest law enforcement organization tasked with ensuring safe travel and trade while maintaining economic prosperity through innovative practices.
