industry · quantum risk
Is Energy / Utilities Quantum Proof? OT & Grid Crypto Risk
Verdict
Energy and utilities are not quantum-proof. IT/OT boundaries, field devices, and control-center remote access still largely depend on classical public-key crypto with slow change windows.
Overview
Smart grids and generation assets mix legacy serial protocols with modern IP and VPNs. Quantum programs must respect safety change control.
Prioritize IT/OT boundary hybrid TLS and remote admin while planning multi-year field upgrades.
Cryptographic profile
- Signatures: OT/ICS field device crypto as deployed, Control-center TLS and VPN, Grid PKI where used
- Hash: Protocol-dependent
- Public-key exposure: Safety-critical systems with multi-decade equipment life.
- Vertical: energy
What breaks
- Untracked jump hosts into OT
- Vendor RTUs without update paths
- Assuming air gap equals crypto inventory completion
Mitigations
- OT crypto asset inventory with engineering
- Boundary and remote-access pilots first
- Exception management for multi-year residuals
FAQ
Related OT page?
/is-quantum-proof/sector-ot-critical-infra
CISA?
/is-quantum-proof/cisa-quantum
Key concepts (technical dictionary)
Terms used on this page — open a definition: