FortiOS: Quantum-Safe Security in Age of Advanced Computing

Despite traditional encryption methods protecting data for years, the rise of quantum computing is presenting challenges to their efficacy in guarding sensitive data.

Quantum computing, with its ability to perform immense calculations at unprecedented speeds, threatens to make standard encryption obsolete, creating significant obstacles for current cybersecurity measures.

This evolving landscape has prompted some cybercriminals to engage in “harvest now, decrypt later” strategies, collecting encrypted data today with the expectation of cracking it using future quantum capabilities.

Industries such as financial services, healthcare, telecommunications and government — where data sensitivity is critical and long-lasting — must prioritize quantum-resilient cybersecurity immediately.

FortiOS and quantum threats

Fortinet has recognised this imminent threat and responded by enhancing FortiOS, its flagship operating system.

This pivotal platform integrates security and networking functions into a cohesive unit.

With the advent of FortiOS 7.6, enterprises that deploy FortiGate Next-Generation Firewall (NGFW) and Fortinet Secure SD-WAN can now access quantum-safe capabilities.

The noteworthy quantum-safe advancements in FortiOS include:

1. Post-Quantum Cryptography (PQC): FortiOS integrates National Institute of Standards and Technology (NIST)-approved post-quantum cryptographic algorithms, including ML-KEM, as well as promising contenders like BIKE, HQC and Frodo. These methods are designed to resist the computational power of quantum attacks.
2. Quantum Key Distribution (QKD): Leveraging quantum mechanics principles, QKD enables secure key exchange by ensuring any eavesdropping is immediately detectable. Since FortiOS 7.4, the system supports plug-and-play integration with leading QKD vendors via standardised interfaces, underlining Fortinet’s commitment to quantum-resilient infrastructure.
3. Algorithm stacking: By combining multiple cryptographic algorithms, FortiOS algorithm stacking strengthens network defences, making unauthorised decryption significantly more complex — even for quantum adversaries.
4. Hybrid security mode: This allows a gradual, seamless transition between traditional public-key cryptography and new quantum key technologies, giving organisations time to adapt without disruption.
5. User-friendly management: FortiOS introduces an enhanced interface that demystifies the configuration of quantum-safe settings, empowering network administrators to implement robust protections without needing deep quantum expertise.

“At Fortinet, we’re committed to arming customers with cutting-edge technology to protect against new and emerging threats,” Michael Xie, Founder, President and CTO at Fortinet, says.

“As quantum computing advances, organisations can trust Fortinet’s technology innovation and leadership to safeguard their critical data and future-proof their infrastructures. 

“Many enterprises are eager to take action to protect their networks from quantum-powered threats. That’s why we’ve made cutting-edge, quantum-safe features available today for FortiGate NGFW and Fortinet Secure SD-WAN customers, so they can confidently transition to post-quantum security.”

Enhancing quantum-safe cybersecurity

One primary concern associated with advanced cryptography is potential system performance degradation.

Fortinet addresses this by maintaining its design philosophy, ensuring quantum-safe features are delivered without compromising network throughput or scalability.

Thus, businesses can secure data now while ensuring uninterrupted operations.

The consistent availability of these quantum abilities across Fortinet’s platforms ensures no additional costs for customers.

This approach presents a model for readiness, enabling companies to prepare for quantum transitions efficiently.

Is Fortinet setting a new standard for cyber resilience?

Thanks to Fortinet’s proactive enhancements in FortiOS, enterprises across sectors such as government, healthcare and beyond can navigate the shift to the post-quantum era with increased confidence.

Adopting these technologies now positions organisations to meet tomorrow’s security challenges, ensuring data protection no matter what new computational developments arise.