IETF Publishes Hybrid ML-KEM Key Agreement for TLS 1.3
RFC 10024 specifies three combinations of ML-KEM and elliptic-curve key agreement at Proposed Standard maturity.
Post-quantum security
The migration of today’s systems to quantum-resistant cryptography.
A clear starting point
Post-quantum cryptography runs on conventional computers and is designed to resist both classical and quantum attacks. It is distinct from quantum key distribution, which uses physical quantum signals, and from quantum random-number generation.
Migration is a systems problem as well as an algorithm choice. Organizations need to identify where cryptography is used, check interoperability and update products as implementations and guidance evolve. Standards alignment does not automatically certify a particular product.
NIST post-quantum cryptography project ↗Latest coverage
IETF Publishes Post-Quantum Algorithms for OpenPGP
RFC 9980 adds composite encryption and signatures, plus standalone hash-based signatures, to the OpenPGP protocol.
US Order Sets Federal Post-Quantum Migration Deadlines
High-value and high-impact federal systems receive 2030 key-establishment and 2031 digital-signature migration deadlines.
Who is working on it
ID Quantique
Supplies equipment for distributing cryptographic keys and components for generating randomness. ID Quantique operates as an IonQ subsidiary following the May 2025 controlling-stake acquisition.
Research & evidence →PQShield
Provides cryptographic building blocks that developers integrate into applications and devices to prepare for quantum-computer attacks. PQC runs on conventional computing hardware and does not require a quantum network.
Research & evidence →QuSecure
QuProtect discovers the cryptography used by network connections, manages algorithm changes and produces a cryptographic inventory. It applies post-quantum algorithms in conventional software.
Research & evidence →SandboxAQ
post-quantum security; AI-driven simulation; quantum sensing
Research & evidence →Selected organizations relevant to this topic. Inclusion is not a ranking.
Watch & understand
Shor's Algorithm for Quantum Computing - Computerphile
A computer scientist and a physicist unpack Shor’s factoring algorithm and why sufficiently capable quantum computers would threaten some public-key encryption.
Watch the original video →Q‑Day Explained: How Quantum Computing Threatens Today’s Cryptography
IBM Technology's Jeff Crume introduces Q-Day: the future threat powerful quantum computers could pose to today's encryption. His security briefing connects Shor's algorithm with the need to prepare for post-quantum cryptography, giving viewers a practical reason to care about quantum computing beyond the laboratory.
Watch the original video →How Quantum Computers Break Encryption | Shor's Algorithm Explained
Watch the original video →Quantum Computing: Untangling the Hype
In this 2018 Royal Institution discussion, Artur Ekert and Harry Buhrman join Philip Ball to unpack quantum computing, cryptography and the limits behind the promises.
Watch the original video →