{"id":1472,"date":"2020-12-08T17:14:01","date_gmt":"2020-12-08T17:14:01","guid":{"rendered":"https:\/\/sectigostore.com\/blog\/?p=1472"},"modified":"2020-12-11T12:24:17","modified_gmt":"2020-12-11T12:24:17","slug":"what-is-a-quantum-safe-hybrid-digital-certificate","status":"publish","type":"post","link":"https:\/\/sectigostore.com\/blog\/what-is-a-quantum-safe-hybrid-digital-certificate\/","title":{"rendered":"What Is a Quantum-Safe Hybrid Digital Certificate?"},"content":{"rendered":"\n

Sectigo\u2019s Tim Callan, Jason Soroko and Alan Grau break down what quantum safe hybrid TLS certificates are and how they can help to prepare businesses for quantum-safe cryptography in Sectigo\u2019s Root Causes podcast<\/a><\/h2>\n\n\n\n

Quantum computing is poised to disrupt the technological world as we know it. And although quantum computing \u2014 and all of the advantages it offers \u2014 is still realistically years away<\/a>, businesses and organizations need to prepare themselves for its inevitable downside: broken cryptosystems.<\/p>\n\n\n\n

Quantum computers will break our existing asymmetric cryptosystem<\/a> \u2014 something that cybercriminals will be ready and eager to take advantage of. This is why it\u2019ll be necessary to migrate your existing IT and cryptosystems to their quantum-resistant or quantum-safe equivalents.<\/p>\n\n\n\n

But, of course, upgrading to post quantum cryptographic (PQC) systems and infrastructure takes time and resources. So, one of the ways to help futureproof your cyber security through this process is through the use of hybrid digital certificates<\/strong> such as a hybrid TLS certificate.<\/p>\n\n\n\n

In the podcast, Tim Callahan, Jason Soroko and Alan Grau break down the subtle but important distinctions to know about quantum-safe hybrid digital certificates.<\/p>\n\n\n\n

What Is a Hybrid Digital Certificate?<\/h2>\n\n\n\n

A hybrid certificate is essentially a traditional X.509 digital certificate<\/a> that has additional quantum-safe components encoded within it. This type of certificate, also known as a cross-signed hybrid certificate, is a versatile way to enable your servers to meet the needs of different clients (web browsers) to allow them to connect regardless of their crypto capabilities.<\/p>\n\n\n\n

However, it\u2019s important to note that hybrid digital certificates are a means to an end but aren\u2019t the end solution in and of themselves. What we mean is that hybrid certificates help to bridge the gap between PQC-enabled systems and non-upgraded systems<\/strong> through versatility. This helps during the transition period, but the ultimate goal is for everyone \u2014 clients and enterprises alike \u2014 to use quantum safe cryptography.<\/p>\n\n\n\n

What this type of certificate offers is cryptographic agility<\/a>, or crypto agility. (We\u2019ll speak more on the topic of crypto agility later.) Basically, once your business starts the transition to quantum-safe systems and applications, you won\u2019t have to try to support two separate certificates \u2014 a traditional digital certificate and a quantum-safe digital certificate \u2014 since you\u2019d already have a two-in-one hybrid certificate in place. This provides interoperability during the transition period.<\/p>\n\n\n\n

How Secure Connections Work Within Our Current Pre-Quantum Ecosystem<\/h2>\n\n\n\n

Website security as we know it relies on something known as public key infrastructure (PKI)<\/a>. This combination of policies, procedures and technologies that support public key cryptography. Examples of traditional X.509 certificates include:<\/p>\n\n\n\n