Dom Gilmore
09/12/2024
Decentralized Self-Sovereign Identity,
Digital Identity,
Post Quantum
2 Minutes
Nuggets adds NIST-specification post-quantum security update for enhanced personal data encryption
We're excited to announce a significant technical update with the implementation of Post Quantum encryption for Nuggets user data.
Safeguarding sensitive information is paramount in an era of ever-present concerns about data breaches and cyber threats. At Nuggets, we're committed to staying at the forefront of data privacy and security and ensuring your information remains protected, both today and in the years to come.
The Quantum Threat
Quantum computers, while not yet fully realised, have the potential to break many of the encryption methods we rely on today. This isn't a distant threat – experts predict quantum computers capable of breaking current encryption could be available within the next decade. That's why we're acting now to protect your data from harvest now decrypt later attacks (HNDL).
Our Approach
In our latest update, we've wrapped your data in dual encryption for maximum security. The first wrapper adds a layer of post-quantum cryptography (PQC) that has recently been approved by NIST, while the second utilises the existing NIST-approved methods. Think of it as a conventional safe (current encryption) inside a future-proof vault (post-quantum encryption), ensuring the data stays secure now and in the future.
What is Dual Encryption?
Dual encryption is a multi-layered approach to data protection. It combines the strengths of existing, proven encryption methods with the emerging field of post-quantum cryptography (PQC). Both layers of encryption in our system are based on NIST-approved standards:
- Conventional Encryption: We continue to utilize industry-standard encryption algorithms that have a long track record of security and effectiveness. These NIST-approved methods provide robust protection against current cybersecurity threats.
- Post-Quantum Cryptography (PQC): In anticipation of future advancements in quantum computing, we've added a second layer of protection using the NIST-approved PQC algorithm (specifically the ML-KEM standard, derived from the CRYSTALS-KYBER submission). These algorithms are designed to be resistant to attacks from even the most powerful quantum computers, which could potentially break conventional encryption standards.
Why Dual Encryption Matters
This dual encryption approach, aligned with NIST's recent key-wrapping guidelines, ensures that your data is shielded by a double layer of security.
Present Security: The conventional encryption layer provides immediate, robust protection against current threats and vulnerabilities.
Future-Proofing: The PQC layer safeguards your data against potential risks posed by quantum computing in the future. Even if quantum computers become capable of breaking current encryption standards, your Nuggets of precious personal information remain private and secure.
Seamless Implementation
The best part? This significant security upgrade requires no action on your part. We've implemented dual encryption behind the scenes. Next time you update anything in your wallet, your data will be protected with the new encryption method, ensuring your experience with Nuggets remains smooth and uninterrupted.
Commitment to Compliance and Data Security
This update demonstrates our dedication to prioritising the privacy and security of user data while ensuring compliance with evolving data protection regulations. By implementing PQC, we're not only enhancing current security measures but also staying ahead of emerging standards. We understand the importance of anticipating future challenges, and we continually invest in cutting-edge technologies to maintain Nuggets as a safe, trusted, and compliant platform for long-term data protection.
We're thrilled to empower our users with this significant security enhancement, offering both businesses and individuals the assurance that their data will remain private and secure, both now and in the future. Rest assured, we'll continue to evolve and adapt our privacy and security measures to protect you in an ever-changing digital landscape.
Have questions about dual encryption or our security measures? Don't hesitate to reach out to our team to learn more. Your trust is our most valuable asset, and we're here to ensure you feel confident in the security of your data with Nuggets.
Nuggets is a Decentralized Self-Sovereign Identity and payment platform that guarantees trusted transactions, verifiable credentials, uncompromised compliance, and the elimination of fraud - all with a seamless user experience and increased enterprise efficiencies.
We’re building a future where digital identity is private, secure, user-centric, and empowering.
We’d love to hear from you if you want to enhance your data privacy and security offering.
You can learn more about our solutions here or get in touch with us here.