|
Enterprises need to focus on gaining visibility into their cryptographic estate in preparation for impending changes needed to prepare for PQC and plan for accommodating hybrid and cryptographically agile implementations of PQC. Not all IT systems will be able to accommodate the expected compute and memory requirements of PQC software updates. The Palo Alto Networks announcement provides a smooth path for organizations dependent on legacy systems to combine PQC readiness with operational continuity. |
企业需要专注于提高其加密资产的可见性，为即将到来的变更做准备，为PQC做准备，并计划适应混合和加密敏捷的PQC实施。并非所有 IT 系统都能够满足 PQC 软件更新的预期计算和内存要求。Palo Alto Networks的公告为依赖传统系统的组织提供了将PQC就绪性与运营连续性相结合的平稳途径。 |
|
Palo Alto Networks has applied an old concept to a new problem in taking a “virtual patching” approach to facilitating PQC readiness. Virtual patching has historically provided protection against vulnerabilities without modifying the code or system. In this case, Palo Alto Networks is providing a performance-optimized encryption proxy using the latest next-generation firewalls (NGFW), which are performance-optimized for PQC algorithms. Combining these NGFW with the latest update to PAN-OS introduces a "cipher translation proxy" that provides a bridge for web applications that must be protected but cannot be upgraded. This proxy adapts to a PQC world by translating classical cryptographic communications into quantum-safe ones and vice versa. |
Palo Alto Networks将旧概念应用于一个新问题，即采用 “虚拟补丁” 方法来促进PQC就绪。虚拟补丁历来可以在不修改代码或系统的情况下提供漏洞防护。在这种情况下，Palo Alto Networks使用最新的下一代防火墙（NGFW）提供性能优化的加密代理，该防火墙针对PQC算法进行了性能优化。将这些 NGFW 与 PAN-OS 的最新更新相结合，引入了一个 “密码转换代理”，它为必须保护但无法升级的 Web 应用程序提供了桥梁。该代理通过将传统的加密通信转换为量子安全的通信来适应 PQC 世界，反之亦然。 |
|
The exact timing for a cryptographically capable quantum computer is unknown, but the challenges are engineering challenges rather than physics challenges. It is not if quantum computers will arrive, but rather when cryptographically relevant quantum computers will arrive. Palo Alto Networks is providing a path for enterprises to understand their cryptographic exposure and options for legacy infrastructure that cannot be updated to achieve PQC readiness. |
具有密码学能力的量子计算机的确切时间尚不清楚，但挑战是工程挑战，而不是物理挑战。这不是量子计算机是否会到来，而是与密码学相关的量子计算机何时到来。Palo Alto Networks为企业提供了一条了解其加密风险以及无法更新以实现PQC就绪的传统基础设施的选择的途径。 |
|
The Palo Alto Networks solution is a major piece of PQC readiness that complements enterprise initiatives to prepare digital certificate infrastructure for the upcoming changes caused by quantum computing. |
Palo Alto Networks解决方案是PQC就绪的重要组成部分，它补充了企业为准备数字证书基础设施以应对量子计算引发的即将发生的变化的举措。 |