Guidance on Post Quantum Cryptography in Netskope One

This white paper provides guidance on the use of encryption within the Netskope One platform, focusing on the implications of post quantum cryptography (PQC). It outlines the current state of encryption technologies and the potential vulnerabilities posed by quantum computing. The document details the types of encryption key architectures employed, including symmetric and asymmetric encryption, and discusses the specific algorithms used, such as AES-256 for symmetric encryption and RSA for asymmetric encryption. The paper also highlights the ongoing research into quantum safe encryption algorithms and the efforts by organizations like NIST to standardize these algorithms. Additionally, it presents Netskope's roadmap for integrating PQC into its systems, including the phased rollout of support for the ML-KEM algorithm for key agreement in TLS/IPsec connections. The document emphasizes Netskope's commitment to staying at the forefront of cryptographic innovation in response to evolving security threats.