Exploring Quantum: A Conversation With Peter Bordow
In this one-off exclusive interview with Quantum.Tech, Peter Bordow, SVP, Distinguished Engineer and PQC/Quantum Systems & Emerging Technologies Leader for Cybersecurity at Wells Fargo sat down with Quantum.Tech to explore his unique perspective and deep understand of the industry which has earned him a reputation as a trailblazer. In this exclusive interview, Peter told us:
- Where Wells Fargo stands on the discussions around cybersecurity and quantum.
- How much work he is having to conduct around PQC/QKD.
- What he looks for in terms of real developments in an ever evolving quantum landscape.
Where does your organisation stand on the discussions around cybersecurity and quantum?
We are keenly aware of the current and anticipated threats from cryptographically relevant quantum computers and are working diligently to mitigate the threat within our organization, as well as throughout the global financial ecosystem through collaborative partnerships with private, academic, and government entities around the world.
In addition, we’re watching the development of other quantum-enhanced cybersecurity implementations and advances in intrusion detection systems, fraud identification and prediction, and bad actor threat modelling.
How much work are you having to do around PQC/QKD solutions? Have you seen a shift towards this from enterprise and government peers?
Developing, testing, and proving PQC and QKD solutions is a big priority for us and the financial industry, though it’s just one piece of the puzzle in establishing a transition to post quantum cryptography. Keep in mind PQC is not the first significant cryptographic transition we’ve faced (nor will it be the last). Over the decades, there have been many cryptographic transitions: 3DES, RSA, AES, ECC, SHA-2 and now PQC. It’s also important to note that PQC will not be a “one and done” transition. This will be a long game where we'll be mitigating threats we know today and anticipating those not yet known or invented for decades to come.
The successful transition to PQC will rest squarely on the foundations of cryptographic asset discovery, inventory, and risk modelling, along with mitigation strategy and crypto agility planning, are just as important as having a solution portfolio. In fact, most of the heavy lifting PQC will focus on operational aspects of the cryptographic transition.
What is the most exciting proof of concept you have worked on in the past 12 months?
Recently, we successfully integrated entropy generated externally on a quantum platform with a hardware security module (HSM) and were able to generate legacy and quantum resistant cryptographic keys using that improved entropy. This was the first step on a much longer journey toward a quantum-resilient public key infrastructure.
The quantum ecosystem is growing exponentially, what do you look for in terms of real developments?
From a cyber defence standpoint, we are anticipating developments in quantum memory/QKD repeaters that will help extend the distance limitations of that technology, as well as the work being done in convergence of quantum and other tech, such as AI systems.
In establishing a defensive posture to the eventual quantum threat to cybersecurity, I think it’s important to have a balanced portfolio that includes short- to mid-term focus on PQC algorithms, next generation PKI, long-term focus on quantum communications technologies like QKD, and proactive technologies such as enhanced intrusion detection systems and tripwire systems.
Do you think the big breakthroughs in quantum will be driven by national governments or multinational enterprises?
If we use history as a guide, I anticipate many of the significant breakthroughs in quantum to be a result of partnerships among government, academic, and commercial enterprises. From a cybersecurity standpoint, I see a lot of collaboration and coordination among financial institutions, industry associations, government partnerships, and academic resources.
Who is the tech leader that inspires you/your company?
Personally, I’m inspired by Dr. Michele Mosca of Waterloo University. His work on post-quantum cryptography and quantum key distribution over the last couple decades has been some of the most important work done in this area. Dr. Mosca continues to develop valuable strategies, technologies, and messaging in the cybersecurity space.
How do you source the best talent when looking for the next quantum trailblazers to join your organization?
We try to cast a wide net when it comes to talent acquisition and recruitment. Personally, I think there’s value in a distributed approach of upscaling current talent, recruiting from the available talent pool, and partnering with experts in the field. I’m a big believer in establishing an early education curriculum for younger students to introduce quantum mechanics at a much earlier point in our education system.
You are kindly joining us this September for our European event at Twickenham Stadium - who are you looking forwards to meet?
While I’ve done numerous presentations and lectures here in the United States over the last few years, this will be my first trip across the pond. I’ve worked with so many amazing people via phone and video conference over the years, there’s a long list of individuals I’m looking forward to meeting in person for the first time!