{"id":135514,"date":"2025-12-15T10:31:39","date_gmt":"2025-12-15T10:31:39","guid":{"rendered":"https:\/\/www.intelligentcio.com\/me\/?p=135514"},"modified":"2025-12-15T10:31:40","modified_gmt":"2025-12-15T10:31:40","slug":"post-quantum-cryptography-the-status-quo-and-need-for-action","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/me\/2025\/12\/15\/post-quantum-cryptography-the-status-quo-and-need-for-action\/","title":{"rendered":"Post-Quantum Cryptography: The status quo and need for action"},"content":{"rendered":"\n

As advances in Quantum Computing accelerate, organisations are under growing pressure to rethink long-term security strategies and prepare for a post-quantum world. Bas Westerbaan, Principal Research Engineer, Cloudflare, tells us why the transition to Post-Quantum Cryptography must start now and how businesses can prioritise key exchange and digital signatures ahead of Q-Day.<\/em><\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

The rapid progress in Quantum Computing is reshaping long-term security planning. While today\u2019s quantum computers cannot yet break widely used cryptographic algorithms, their future potential creates an urgent need to transition to Post-Quantum Cryptography (PQC).<\/p>\n\n\n\n

Data intercepted today could be decrypted later in a \u2018harvest now, decrypt later\u2019 scenario once a powerful quantum computer becomes available – a moment often referred to as Q-Day.<\/p>\n\n\n\n

The Path to Q-Day: Hardware and Software Progress<\/strong><\/p>\n\n\n\n

Two developments influence the arrival of Q-Day: advancements in quantum hardware and improvements in the algorithms that run on these machines.<\/p>\n\n\n\n

Hardware Progress<\/strong><\/p>\n\n\n\n


Every year brings new quantum processors boasting higher qubit counts. But qubits are fragile, and noise limits their reliability. Silicon-based quantum computers are fast and scalable, but extremely noisy\u2014requiring millions of qubits with error correction to break RSA-2048. Ion-trap systems are quieter but harder to scale; even hundreds of thousands of qubits could threaten RSA-2048.<\/p>\n\n\n\n

Scalability remains a challenge, but Google\u2019s Willow project – announced in late 2024 -demonstrated the first scalable implementation of a logical qubit using surface code, a major milestone. Google continues to advance superconducting qubits, while Microsoft explores topological qubits, a theoretically much more stable but not yet proven architecture. Other emerging approaches include neutral atoms and ion traps. Still, software optimisations have accelerated the threat more dramatically than hardware.<\/p>\n\n\n\n

Software Breakthroughs<\/strong><\/p>\n\n\n\n


In 2025, Craig Gidney\u2019s work showed that breaking RSA-2048 requires fewer than one million superconducting qubits – down from earlier estimates of 20 million – bringing Q-Day about seven years closer, assuming a Moore\u2019s law of qubit counts doubling every one-and-half years. Further optimisations are expected, but RSA-2048 will likely require at least a quarter million superconductig qubits.<\/p>\n\n\n\n

Occasionally, new dramatic algorithmic claims surface. In 2024, a proposed quantum algorithm by Yilei Chen briefly caused concern for lattice-based cryptography before being shown incorrect. This episode highlighted how heavily today\u2019s PQC designs rely on lattice-based schemes, and how few viable alternatives exist. Quantum key distribution, often presented as a solution, is not scalable enough for widespread deployment.<\/p>\n\n\n\n

How Soon Will Q-Day Arrive?<\/strong><\/p>\n\n\n\n

While no one can predict the exact date, governments are not waiting. The U.S. NSA\u2019s CNSA 2.0 guidelines set migration targets for 2030\u20132033, while the U.S. federal government aims for full adoption by 2035. Australia plans completion by 2030, and the UK and EU expect transitions between 2030 and 2035. Regardless of when Q-Day occurs – 2034 or 2050 – most experts agree it will come too soon for organisations that delay preparation.<\/p>\n\n\n\n

Two Migration Priorities: Key Exchange and Signatures<\/strong><\/p>\n\n\n\n

Transitioning to PQC involves two critical components: key agreement and digital signatures.<\/p>\n\n\n\n

Symmetric encryption (like AES-GCM) is already considered safe against quantum attacks. Grover\u2019s algorithm does not require doubling key sizes, so AES-128 remains robust. Increasing to AES-256 is optional.<\/p>\n\n\n\n

The real vulnerability lies in traditional asymmetric cryptography – RSA and ECC – which quantum computers can break using Shor\u2019s algorithm. Organisations must prioritise replacing these systems rather than strengthening symmetric encryption.<\/p>\n\n\n\n

1. Post-Quantum Key Agreement<\/strong><\/p>\n\n\n\n

Key agreement is urgent because it prevents harvest-now\/decrypt-later attacks. Today\u2019s TLS handshakes rely on X25519, which collapses under quantum attack. Post-quantum methods like ML-KEM can be integrated into existing systems with minimal disruption. Cloudflare already protects about half its traffic using hybridfully post-quantum key exchange methods, and all major browsers now support PQC by default.<\/p>\n\n\n\n

2. Post-Quantum Signatures and Certificates<\/strong><\/p>\n\n\n\n

Digital signatures authenticate identities online. RSA and ECDSA signatures will be forgeable by quantum computers, but replacing them is far more complex than updating key exchange. TLS handshakes use multiple signatures, certificate chains are long, and post-quantum signatures tend to be much larger.<\/p>\n\n\n\n

NIST has standardised ML-DSA and SLH-DSA for signatures, but wide adoption requires updates to certificate formats, browsers and certificate authorities. We expect the first PQ certificates available in 2026, with broader adoption by 2027.<\/p>\n\n\n\n

Where PQC Stands Today<\/strong><\/p>\n\n\n\n

By 2025, PQC entered mainstream deployment. NIST standardised ML-KEM (FIPS 203) for key exchange and ML-DSA\/SLH-DSA for signatures (FIPS 204\/205). ML-KEM is now widely supported in TLS, browsers and operating systems. ML-DSA support in certificates is progressing but not fully integrated.<\/p>\n\n\n\n

Meanwhile, Cloudflare, Google, and browser vendors have spent years testing hybrid approaches like X25519MLKEM768 to ensure compatibility, performance and resilience during the transition. Despite early friction – largely due to middleboxes expecting classical packet sizes – over 50% of global Internet traffic is now protected against quantum-era decryption attacks.<\/p>\n\n\n\n

The Harder Part: PQ Signatures<\/strong><\/p>\n\n\n\n

Signatures remain the biggest hurdle. ML-DSA-44 adds around 15 KB of extra data to each TLS handshake – too heavy for slow mobile networks. FN-DSA-512 reduces this overhead but introduces side-channel risks from floating-point operations. Experimental schemes like SQISign, MAYO, SNOVA and UOV offer trade-offs between size, performance and security, but none are ready for large-scale deployment. That is why we\u2019re working with Chrome on Merkle Tree Certificates, a next generation of certificates, that brings post-quantum without performance degradation.<\/p>\n\n\n\n

For now, ML-DSA-44 is the most realistic starting point, even if not ideal.<\/p>\n\n\n\n

What Organisations Should Do Now<\/strong><\/p>\n\n\n\n

Companies should act on two priorities:<\/p>\n\n\n\n

    \n
  1. Adopt post-quantum key exchange immediately.
    Use hybrid modes like X25519 + ML-KEM-768 to prevent harvest-now\/decrypt-later attacks. Tools such as Cloudflare Radar and Wireshark can verify support.<\/li>\n<\/ol>\n\n\n\n
      \n
    1. Prepare for PQ signatures.
      Identify high risk uses of cryptography, modernise outdated systems, enable automated certificate management and begin testing PQ-ready infrastructure.<\/li>\n<\/ol>\n\n\n\n

      The global transition to PQC is an opportunity to modernise decades of legacy cryptography. Those who start early will be ready long before Q-Day arrives.<\/p>\n","protected":false},"excerpt":{"rendered":"

      As advances in Quantum Computing accelerate, organisations are under growing pressure to rethink long-term security strategies and prepare for a post-quantum world. Bas Westerbaan, Principal Research Engineer, Cloudflare, tells us why the transition to Post-Quantum Cryptography must start now and how businesses can prioritise key exchange and digital signatures ahead of Q-Day. The rapid progress […]<\/p>\n","protected":false},"author":18,"featured_media":135516,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[18927,139,19923,12435,9961],"tags":[1563,21497,1530,1643,908,3571,6351,267],"class_list":["post-135514","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-expert-opinion","category-industry-expert","category-quantum","category-tech-trends","category-thought-leadership","tag-cloud-security","tag-cryptography-standards","tag-cybersecurity","tag-data-security","tag-digital-transformation","tag-post-quantum-cryptography","tag-quantum-computing","tag-risk-management"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/135514","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/comments?post=135514"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/135514\/revisions"}],"predecessor-version":[{"id":135518,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/135514\/revisions\/135518"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/media\/135516"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/media?parent=135514"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/categories?post=135514"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/tags?post=135514"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}