Fortinet (FTNT) Status update summary

Quantum threat landscape and urgency

• Quantum computing is projected to break current cryptographic standards by 2034, with threats already present through 'harvest now, decrypt later' attacks targeting encrypted data for future decryption.

• Regulatory frameworks are tightening, especially in India, but remain technologically neutral, leaving organizations responsible for quantum readiness.

• Attackers can intercept encrypted data now and decrypt it once quantum capabilities are available, putting sensitive information at risk.

• Over 52% of HTTPS traffic is already using post-quantum cryptography, with rapid adoption by browsers and SaaS providers.

• All sectors, including finance, healthcare, utilities, and e-commerce, face significant risks from quantum-enabled attacks.

Implementation challenges and migration strategies

• Legacy infrastructure, such as routers and load balancers, is not quantum-ready, requiring significant upgrades or replacements.

• Migration to post-quantum cryptography is a phased process, with hybrid approaches allowing gradual transition without performance loss.

• Organizations need to inventory current cryptographic assets and plan for phased upgrades, considering both technical and budgetary constraints.

• Training and hiring quantum expertise are essential for a successful transition.

• Fortinet's solutions enable organizations to adopt quantum-safe encryption at their own pace, minimizing disruption.

Fortinet’s quantum-safe solutions and capabilities

• FortiOS natively supports NIST-approved post-quantum cryptography, quantum key distribution, and hybrid algorithm stacking.

• Upgrading to the latest FortiOS version enables quantum-safe features without hardware replacement or performance degradation.

• FortiGate firewalls can translate between classical and post-quantum cryptography, supporting seamless migration and interoperability.

• Integration with multiple QKD providers allows for military-grade encryption and secure site-to-site VPNs.

• No additional cost is incurred for enabling post-quantum cryptography on supported devices.