Applying it effectively depends on visibility, prioritization, and long-term planning aligned with real-world constraints. Timelines remain uncertain, but data encrypted today may become vulnerable in the future, making early preparation important for long-lived information. Post-quantum cryptography refers specifically to algorithms designed to resist quantum attacks, while quantum-safe cryptography broadly https://unisto-petrostal.ru/en/riski-proekta-analiz-upravlenie-riskami-vidy-proektnyh-riskov-i.html includes systems, protocols, and practices that incorporate those algorithms securely. Together, post-quantum algorithms, hybrid cryptography, and cryptographic agility form the foundation of practical quantum-safe security strategies used by organizations preparing for the future of cryptography. Crypto-agile systems reduce long-term exposure by enabling organizations to respond to emerging threats and regulatory guidance without requiring large-scale redesigns. ISARA delivers the tools, research, and guidance organizations need to modernize cryptography and prevent future compromise.

• In order to get 128 bits of security for hash based signatures to sign 1 million messages using the fractal Merkle tree method of Naor Shenhav and Wool the public and private key sizes are roughly 36,000 bits in length.
• This risk is especially relevant for organizations that manage regulated data, intellectual property, or critical infrastructure.
• ID Quantique (Switzerland), acquired by IonQ in 2025, is a pioneer in commercial QKD systems and quantum random number generators, with deployments across financial and government networks.
• On February 21, 2024, Apple announced that they were going to upgrade their iMessage protocol with a new PQC protocol called “PQ3”, which will use ongoing keying.

Crypto4A (Canada) provides quantum-safe hardware security modules and participated in the Nokia-Numana Blueprint 7 testing. Toshiba (Japan) operates one of the most mature QKD programs globally, with deployed metropolitan networks in London and Tokyo, and has demonstrated long-distance QKD over existing fiber. Quantum key distribution takes a fundamentally different approach, using quantum physics rather than mathematical complexity to secure key exchange.

Garcia showed in his paper that if computationally one-way hash functions exist then the Merkle Hash Tree signature is provably secure. The Post-Quantum Cryptography Study Group sponsored by the European Commission suggested that the Stehle–Steinfeld variant of NTRU, which does have a security reduction, be studied for long term use instead of the original NTRU algorithm. Specific ring-LWE systems that have provable security reductions include a variant of Lyubashevsky’s ring-LWE signatures defined in a paper by Güneysu, Lyubashevsky, and Pöppelmann. In other words, the security of a given cryptographic algorithm is reduced to the security of a known hard problem. These proofs are often called “security reductions”, and are used to demonstrate the difficulty of cracking the encryption algorithm. Given its widespread deployment in the world, some researchers recommend expanded use of Kerberos-like symmetric key management as an efficient way to get post-quantum cryptography today.

Additional Emerging and Supporting Companies

Migration timelines vary significantly based on organizational complexity. Many security architects recommend a layered approach combining both where feasible. These standards provide the algorithmic foundation for quantum-safe cryptography migration worldwide. In March 2025, HQC was selected as an additional key encapsulation mechanism.

This includes cryptographic systems which rely on error-correcting codes, such as the McEliece and Niederreiter encryption algorithms and the related Courtois, Finiasz and Sendrier Signature scheme. Moni Naor and Moti Yung invented UOWHF hashing in 1989 and designed a signature based on hashing (the Naor-Yung scheme) which can be unlimited-time in use (the first such signature that does not require trapdoor properties). This fact reduced interest in these signatures until interest was revived due to the desire for cryptography that was resistant to attack by quantum computers.

Protected optical transport

It enables compliance, risk management, and a smooth migration https://medicarecure.com/northern-trust-launches-market-risk-monitor.html?noamp=mobile to post-quantum cryptography. Encryption Consulting’s CBOM (Cryptographic Bill of Materials) helps organizations discover and inventory all cryptographic assets across their enterprise. Post-Quantum (UK) develops quantum-safe encryption products including a VPN and identity verification system. ISARA Corporation (Canada) builds PQC solutions for certificate management and has been working on crypto-agility since before the NIST standards were finalized.