{"id":323832,"date":"2026-04-24T13:28:45","date_gmt":"2026-04-24T07:58:45","guid":{"rendered":"https:\/\/ebiztoday.news\/?p=323832"},"modified":"2026-04-24T13:28:45","modified_gmt":"2026-04-24T07:58:45","slug":"in-a-primary-a-ransomware-family-is-confirmed-to-be-quantum-safe","status":"publish","type":"post","link":"https:\/\/ebiztoday.news\/index.php\/2026\/04\/24\/in-a-primary-a-ransomware-family-is-confirmed-to-be-quantum-safe\/","title":{"rendered":"In a primary, a ransomware family is confirmed to be quantum-safe"},"content":{"rendered":"
\n

There isn’t a practical profit for Kyber developers to have chosen a PQC key-exchange algorithm. The Kyber ransom note gives victims one week to reply. Quantum computers able to running Shor\u2019s algorithm\u2014the series of mathematical equations that allow the breakage of RSA and ECC (elliptic curve cryptography)\u2014are, at a minimum, three years away and sure much further.<\/p>\n

A Kyber variant that targets systems running VMware,\u00a0 meanwhile, claims to make use of ML-KEM as well. Rapid7 said its look under the hood revealed that, in truth, it uses RSA with 4096-bit keys, a strength that may\u00a0take even longer for Shor\u2019s algorithm to interrupt. Anna \u0160irokova, a Rapid7 senior security researcher and the writer of Tuesday\u2019s post, said the use or claimed use of ML-KEM is probably going only a branding gimmick and that implementing it required relatively little work by Kyber developers.<\/p>\n

In an email, \u0160irokova wrote:<\/p>\n

\n

First, it\u2019s marketing to the victim. \u201cPost-quantum encryption\u201d sounds loads scarier than \u201cwe used AES,\u201d especially to non-technical decision-makers who may be evaluating whether to pay. It\u2019s a psychological trick. They\u2019re not frightened about someone breaking the encryption a decade from now. They need payment inside 72 hours.<\/span><\/p>\n

Second, implementation cost is low. Kyber1024 libraries (renamed to ML-KEM<\/span>)<\/span> can be found and well-documented. Ransomware doesn\u2019t encrypt your files directly with Kyber1024. That will be slow. As a substitute, it:<\/span><\/p>\n

    \n
  1. Generates a random AES key<\/span><\/li>\n
  2. Encrypts your files with that AES key (fast)<\/span><\/li>\n
  3. Encrypts <\/span>that AES key<\/span><\/i> with Kyber1024 (so only the attacker can decrypt it)<\/span><\/li>\n<\/ol>\n

    In Rust, there are already libraries that do Kyber1024. The developer just adds it to their dependencies and calls a function to wrap the important thing.<\/span><\/p>\n<\/blockquote>\n

    Despite the hype, Kyber suggests that PQC is attracting the eye of less technically inclined attorneys and executives deciding tips on how to reply to ransom demands. Kyber developers are hoping the impression that the encryption has overwhelming strength will sway people to pay.<\/p>\n<\/p><\/div>\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    There isn’t a practical profit for Kyber developers to have chosen a PQC key-exchange algorithm. The Kyber ransom note gives victims one week to reply. Quantum computers able to running Shor\u2019s algorithm\u2014the series of mathematical equations that allow the breakage of RSA and ECC (elliptic curve cryptography)\u2014are, at a minimum, three years away and sure […]<\/p>\n","protected":false},"author":1,"featured_media":323833,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[2813,458,50976,14108],"class_list":["post-323832","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-confirmed","tag-family","tag-quantumsafe","tag-ransomware"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/posts\/323832","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/comments?post=323832"}],"version-history":[{"count":2,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/posts\/323832\/revisions"}],"predecessor-version":[{"id":323835,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/posts\/323832\/revisions\/323835"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/media\/323833"}],"wp:attachment":[{"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/media?parent=323832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/categories?post=323832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ebiztoday.news\/index.php\/wp-json\/wp\/v2\/tags?post=323832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}