It is important to note that quantum computing is not expected to start posing a threat to the EMV infrastructure until at least 2040.
Harvest Now Decrypt Later, which aims to steal encrypted data today in the view that it can be decrypted and used for malicious purposes in the future, has driven a requirement in some industries and governments to deploy quantum resistant cryptography. However, this does not apply to EMV Chip transactions, as chip authentication does not require long-term data confidentiality.
Regardless, EMVCo is taking very seriously the potential threat of quantum computers undermining the security of RSA (Rivest, Shamir and Adleman) and ECC (Elliptic-Curve Cryptography) and is actively monitoring and addressing future threats.
EMVCo’s dedicated Security Working Group engages with leading quantum computing and security academics, independent consultants, and government bodies. The findings of this work are regularly shared with the EMV community at EMVCo’s Board of Advisor, Technical and User Meetings.
EMVCo has also published a position statement on ‘Quantum Computing and EMV Chip Cryptography’ that is publicly available here. It is now exploring quantum computing market requirements that are being released at a global and national level and their applicability to EMV technology.