OVHcloud deploys quantum SSL certificates for five million sites
OVHcloud has announced the deployment of SSL certificates for its hosted websites that use quantum-generated random numbers to enhance digital security.
The company has redesigned the process for generating SSL certificates, files used for encryption and server authentication, by leveraging quantum computing. This approach utilises the properties of quantum computers, specifically to produce unpredictable random numbers that are fundamental to secure encryption.
All websites hosted with OVHcloud will now automatically receive SSL certificates issued by Let's Encrypt. These certificates are updated to include quantum-generated random numbers, which provide an added layer of protection for data exchanges between users and websites. According to OVHcloud, this deployment has begun and is being offered free of charge to all web clients.
Quantum approach
Traditionally, random numbers in digital systems are created using electronic circuits, but these can become biased or predictable over time due to various factors, potentially undermining security. Recognising these limitations, OVHcloud has turned to quantum physics, using a process involving photon entanglement to generate genuinely unpredictable random numbers.
This Quantum Random Number Generation (QRNG) process forms part of the SSL certificate renewal and creation for OVHcloud's web client base. The technology was developed on Quandela's quantum computer, which OVHcloud acquired. The company's patented method for this procedure has been referred to as the 'certifiable hazard'.
Julien Levrard, Chief Information Security Officer at OVHcloud, said,
"Using quantum computing to enhance the security level of encryption certificates is not only a world first technology that aims to anticipate evolving threats, but it also defines our vision of OVHcloud innovation. Innovation for freedom"
OVHcloud is currently providing nearly five million hosted websites with these enhanced certificates, with a planned rollout to be completed by the end of October 2025. The certificates are compatible with mainstream web browsers, aiming to boost confidence in cloud security practices across the provider's client base.
Encryption and confidentiality
The move is intended to reinforce the reliability of web encryption keys. By introducing quantum entropy into the certificate generation process, OVHcloud aims to secure the confidentiality of authentication and information exchanged between web servers and their customers. This step comes as the company continues participation in wider internet security initiatives. As a member of the Internet Security Research Group, OVHcloud has worked to support encryption standards and best practices for secure web development.
Let's Encrypt, which issues the certificates, is widely recognised for supporting automated and secure HTTPS deployment on websites. The upgrade to quantum-based entropy further seeks to mitigate emerging cyber threats by making it increasingly difficult to predict or compromise encryption keys through advances in computing power, including the potential future threat posed by quantum computers themselves.
OVHcloud's process for SSL certificate generation is intended to pre-empt the risks that may arise as quantum computing technologies become capable of breaking conventional cryptographic systems. The company points to its R&D efforts in developing what it terms "certifiable hazard" as evidence of ongoing work to boost both data integrity and user privacy.
"Using quantum computing to enhance the security level of encryption certificates is not only a world first technology that aims to anticipate evolving threats, but it also defines our vision of OVHcloud innovation. Innovation for freedom," said Levrard.
Deployment and compatibility
The rollout of certificates with quantum-derived entropy is planned to cover the entirety of OVHcloud's managed websites by the end of October 2025. The use of quantum random number technology in certificate generation is compatible with the latest browser standards and protocols, requiring no additional action from client organisations or their end-users.
OVHcloud states that the new certificates are provided at no additional cost to its web clients. The company maintains control over the key components of its service delivery, from network infrastructure to data centres and security protocols, to facilitate projects such as this transition in SSL certificate generation.
