logo
Quantum Threats Reshape Commvault's Vision For Data Security

Quantum Threats Reshape Commvault's Vision For Data Security

Forbes26-06-2025
Commvault is incorporating post-quantum cryptography to address future data security risks.
Data protection provider Commvault announced earlier this month that it is adding more quantum-safe capabilities to its platform to build out defenses against post-quantum cryptography. This is important because, as quantum computing shifts from theoretical to practical use, it brings a new class of cybersecurity threats. To help organizations prepare, Commvault has incorporated NIST-recommended PQC algorithms into its data protection offerings, covering both cloud and on-premises environments. The goal is to ensure long-term data security by protecting backups made today from potential decryption by future quantum systems.
Over the past year, Commvault has introduced multiple post-quantum cryptography capabilities to safeguard data against future risks posed by quantum computing. PQC has important implications for customers, competitors and the broader industry, and all organizations should prepare for a quantum-driven — and quantum-safe — future.
(Note: Commvault is an advisory client of my firm, Moor Insights & Strategy.)
Understanding The Quantum Threat To Enterprise Data
First, a little background on why this is so important. Quantum computers apply principles of quantum mechanics to process information in fundamentally different ways from classical computers. While this could unlock incredible advances in medicine, materials science, finance, AI and more, it also introduces new security concerns. This is because current encryption methods such as RSA and elliptic curve cryptography depend on mathematical problems that are very hard to reverse — unless a powerful quantum computer is involved. Once quantum computers that powerful are launched, probably in the next few years, these algorithms can potentially be broken quickly, compromising these widely used encryption methods.
A crucial concern today is the 'harvest now, decrypt later' tactic, where bad actors can intercept and store encrypted data to decrypt it in the future once quantum capabilities mature. HNDL protection is especially critical for sectors with long-term data sensitivity, such as healthcare, finance and government. (Think of any setting in which sensitive information — names, dates of birth, government ID numbers, bank account numbers, medical histories and the like — remains unchanged for many years.) A survey by the Information Systems Audit and Control Association found that 63% of cybersecurity professionals believe quantum computing will shift or expand cyber risks, and half expect it to create compliance challenges.
This image shows how users can enable PQC within Commvault's CommCell environment by selecting a ... More checkbox in the group configuration settings.
Commvault's Post-Quantum Cryptography Response
Commvault has taken a practical, multi-stage approach to quantum-era risks. In August 2024, it introduced a cryptographic agility framework, which is meant to allow organizations to adopt new cryptographic standards for PQC without major system changes. The framework includes several NIST-recommended quantum-resistant algorithms — CRYSTALS-Kyber, CRYSTALS-Dilithium, SPHINCS+ and FALCON. (My colleague Paul Smith-Goodson, who has been covering quantum computing for years, went into more detail about these algorithms in the context of IBM's PQC efforts, also in August 2024.)
Commvault's announcement earlier this month builds on last year's release by adding support for the Hamming Quasi-Cyclic algorithm, which uses quantum error-correcting codes to resist quantum decryption. But rather than focusing only on algorithm support, Commvault also emphasizes operational integration. Its Risk Analysis tools help organizations identify sensitive data, allowing quantum-resistant encryption to be applied where it's most needed. The crypto-agility framework offered by Commvault allows organizations to shift between cryptographic methods via relatively simple configuration changes, without needing to overhaul their existing environments. This flexibility helps minimize disruptions and lowers the costs associated with adapting to new standards as they emerge.
Securing Critical Industries For The Quantum Era
Commvault's PQC features should be especially helpful to organizations in healthcare, finance and government as they address compliance needs, ensure continuity and — most importantly — protect data that is held for decades. As touched on above, these industries are especially at risk for deferred decryption attacks, so implementing PQC features now should help address the risk of HNDL exploits later. Besides the benefits already mentioned, this could help organizations using Commvault maintain trust among regulators, customers and partners for the long haul.
As data protection standards in these industries become stricter in anticipation of quantum threats, solutions that incorporate quantum-resistant encryption are increasingly necessary. Forward-looking IT organizations are already adopting these technologies. For instance, the Nevada Department of Transportation has adopted Commvault's PQC tools to meet government security requirements and protect sensitive information. The company also cited Peter Hands, CISO of the British Medical Association, who said, 'Commvault's rapid integration of NIST's quantum-resistant standards, particularly HQC, gives us great confidence that our critical information is protected now and well into the future.'
The adoption of PQC is accelerating as both technological developments and regulatory requirements create a framework for organizations to address emerging threats from quantum computing. In the United States, for instance, federal agencies have been instructed to integrate post-quantum standards into their procurement and operational practices. Similar regulatory efforts are taking place in the European Union and other jurisdictions, where updates to data protection frameworks increasingly include provisions for quantum-safe encryption.
To maintain security and compatibility during the transition, many organizations are implementing hybrid encryption methods that combine traditional and quantum-resistant algorithms. This approach allows for gradual migration to fully quantum-resistant systems while enabling protection against both current and future threats.
PQC Challenges And The Push For Wider Adoption
Commvault's phased introduction of PQC capabilities is a step forward, but current support is mostly limited to cloud-based customers using particular software versions. This creates a gap for organizations relying on hybrid or on-premises environments, which are still widely used in sensitive sectors like those already mentioned. To address this, Commvault would benefit from providing a clear roadmap for extending PQC support across all deployment models. Such a roadmap should outline which software versions will be supported, specify the technical requirements and offer a realistic timeline for implementation.
The broader data protection market is also shifting as major technology providers such as IBM and Microsoft integrate quantum-safe features into their platforms. Other data protection vendors, such as Cohesity, Veeam and Rubrik, are expected to follow suit as industry standards become more established. This means Commvault will likely face growing competition in offering robust PQC solutions. Keeping pace will require not only technical expansion but also practical guidance for customers on how to adopt and apply PQC in various enterprise scenarios. Flexibility and clear communication about available features and best practices will be important for supporting a wide range of customer environments and needs.
Aligning Data Security Strategies For A Quantum Future
Commvault's early efforts in post-quantum cryptography and crypto-agility demonstrate a commitment to long-term data security. However, maintaining progress will depend on expanding access to PQC features for all customers, providing transparent information about costs and continuing to work closely with regulatory bodies.
Quantum computing presents both new risks and opportunities. As traditional encryption methods become more vulnerable, the need for quantum-resistant security will grow. Commvault's PQC features offer a practical way for organizations to protect data that must remain secure for years. By focusing on adaptability, compliance and targeted encryption strategies, Commvault helps customers build stronger defenses for the future.
The timeline for quantum decryption could be shorter than many anticipate, making it important for organizations to start preparing now. For enterprises, taking early action is important to avoid exposure and regulatory issues. For vendors, ongoing improvements in accessibility, transparency and alignment with emerging standards will determine long-term success. Simplifying the path to quantum readiness will be a key factor in supporting customers through this transition.
Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

Musk's Playbook Won't Do for Social Security
Musk's Playbook Won't Do for Social Security

Wall Street Journal

time9 minutes ago

  • Wall Street Journal

Musk's Playbook Won't Do for Social Security

Your editorial 'The Social Security Iceberg Gets Closer' (June 20) rightly warns that delaying reform will make eventual fixes more difficult and painful. Effective solutions don't require gutting benefits or indulging political theater about fraud. One idea is to modernize the benefit formula to target assistance better. Social Security must protect those with lower lifetime earnings, but the program can be made more progressive by slightly slowing benefit growth for higher-income retirees, many of whom live longer and collect more. Increasing the number of working years used to calculate benefits would also improve incentives to work at older ages and help reduce the program's shortfall.

I Highly Recommend This Security Cam to Anyone on a Budget, and Now It's 50% Off for Prime Day
I Highly Recommend This Security Cam to Anyone on a Budget, and Now It's 50% Off for Prime Day

CNET

time10 minutes ago

  • CNET

I Highly Recommend This Security Cam to Anyone on a Budget, and Now It's 50% Off for Prime Day

I've tested dozens of security cameras over the years from brands like Blink, Lorex, Ring, Arlo and more. And no matter which model I'm looking at, one thing always holds constant: A camera with premium features is typically going to come with a hefty price tag. Prices for just a single camera can easily run $200 or even more. So when you're trying to put together a system with multiple cameras, the total cost can get out of hand quickly. But the second-gen Arlo Essential 2K cam surprisingly manages to stand out from the pack, and I recommend it as an affordable security solution for those who are on a budget. Right now ahead of Prime Day, it's marked down by 50% on Amazon, dropping the price to just $50. That's a seriously good price for a camera that offers many of the same features of Arlo's highest-end models. If you're in the market for more than one security camera, the two-pack is currently discounted by 58%, bringing the price down to $80 from its usual $190 price tag. What I like about the Arlo security camera While testing the Arlo Essential 2K Cam, I found the indoor-outdoor wireless camera performs well. The 2K resolution helps gather plenty of details, it's highly weather resistant and Arlo's app excels at walkthroughs on how to set up and use the cam. Other common features include two-way audio, color night vision and a built-in siren. Arlo isn't done yet. The cam's integrated spotlight did a great job of lighting up my backyard -- and if you prefer other smart home platforms, it plays well with Alexa and Google Home, as well as IFTTT (no Apple HomeKit support at this time, but it's a possibility). For more, here are CNET's picks for the best home security systems. Hey, did you know? CNET Deals texts are free, easy and save you money. Arlo wins at customization in the home security conversation I liked a lot of what the Arlo Essential does but it's not too different from what many other security cameras do -- just surprisingly affordable. I really like Arlo's UI and smart home integration too, with an app that's easy to understand and pop open for a quick look at your home when you're out on the town (and that doesn't even require a subscription). It's the deeper customization features that really impressed me. Those who like to tinker with their home security setup will love the beta-version custom detection options that come with higher-tier subscriptions, in addition to facial and vehicle recognition. I haven't seen custom setups like this on any other security camera before. In my tests, I was able to "teach" the cam AI to recognize when a pet toy appeared on camera or when certain objects were no longer present. I could also use this feature to tell me when the garage door opened or if something valuable (say, a piece of artwork) disappeared. Likewise, the vehicle detection options can tell if a specific vehicle is pulling up to your home. I've never seen anything else like this for those who really want to push their home security to the limits. Arlo's Essential cam is a great deal but keep in mind Arlo's subscription options. Arlo Best July Prime Day Deals 2025 CNET's team of shopping experts have explored thousands of deals on everything from TVs and outdoor furniture to phone accessories and everyday essentials so you can shop the best Prime Day deals in one place. See Now Arlo cams for yourself or others With Arlo's easy and informative setup process, the Essential camera is a great choice even if you or your family haven't tried a security camera before. As long as a user is comfortable trying out a new app and following the instructions, Arlo is an excellent experience. I rate the app and user-friendliness around Blink's level, another one of my favorite camera apps. With indoor/outdoor placement, the camera is also versatile so you don't have to worry about people not finding a place to use it. You could also spend a bit more to upgrade the camera with an extended battery and a solar panel, an effective combo if you want to avoid manually charging the battery as much as possible. It still needs a Wi-Fi connection but this combo is great for out-of-the-way spots like above my garage door or a high point on roof eaves. If you're thinking about getting this Arlo Essential camera as a gift, keep in mind Arlo locks quite a few important features behind its $8-plus monthly subscription, including smart alerts with object recognition and cloud video storage. So while the camera is usable without fees, there's a strong incentive to pay. Arlo does offer a free trial of its services but that could feel like a bait-and-switch to gift recipients who aren't expecting a security camera. If you want to give the cam as a gift, you may want to add some PayPal or Venmo cash to cover at least several months of a subscription. If you're on the hunt for other options, check out our full list of the best home security cameras of 2025.

AI in Trucks Is Worth a Shot
AI in Trucks Is Worth a Shot

Wall Street Journal

time12 minutes ago

  • Wall Street Journal

AI in Trucks Is Worth a Shot

Jordan McGillis's op-ed 'AI Can Keep Truck Drivers Awake' (June 30) inspires great hope. In the late 1950s, my grandparents survived a terrible crash with a truck whose driver had fallen asleep. As my grandfather was turning his car into a motel entrance, the truck rammed into the passenger side of the car severely injuring my grandmother, causing brain damage and other significant physical injuries. My grandfather was also injured but not as badly. My grandmother struggled to relearn to walk, write and speak normally. As a small child I cherished every moment I spent with her, but because we lived in Boston, miles away from their Ohio farm, they were never able to visit again.

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into a world of global content with local flavor? Download Daily8 app today from your preferred app store and start exploring.
app-storeplay-store