DataTerminology.comNEW
Also known as: PQC
Cryptographic algorithms designed to remain secure against adversaries equipped with large-scale quantum computers.
DESCRIPTION
Post-quantum cryptography prepares for quantum attacks that could break RSA and ECC via Shor’s algorithm. PQC families include lattice-, hash-, code-, and multivariate-based schemes. NIST is standardizing algorithms like Kyber (KEM) and Dilithium (signatures). Migration involves inventorying crypto use, adopting hybrid key exchange, and updating protocols. Regulatory guidance encourages crypto-agility and readiness. PQC impacts TLS, VPNs, PKI, and device firmware. Performance and key sizes vary by algorithm and platform.
ALTERNATIVE DEFINITIONS
NIST
Post-quantum cryptography refers to cryptographic algorithms that are thought to be secure against an attack by a quantum computer.
Defines PQC in relation to quantum-computer adversaries and security assumptions.
ENISA
Post-quantum cryptography (PQC) denotes cryptographic algorithms that are believed to be secure against cryptanalytic attacks by quantum computers.
Highlights threat model and transition guidance from a European cybersecurity agency.
RELATED TERMS
Quantum Computing RSA Elliptic Curve Cryptography Lattice-Based Cryptography Hash-Based Signatures Code-based Cryptography NIST PQC Kyber Dilithium Hybrid Key Exchange
COMPETING TERMS
Classical Cryptography Quantum Key Distribution
RELATIONS
- Narrower: Code-based Cryptography
KNOWLEDGE AREAS
Data Security Data Privacy & Compliance Infrastructure
TARGET AUDIENCE
Chief Information Security Officer Security Architect Cybersecurity Engineer Chief Technology Officer Cloud Architect Data Privacy Officer
EXTERNAL SOURCES
- Wikipedia - Post-quantum cryptography
- NIST - Official PQC project page
- IETF - Hybrid key exchange draft
- Cloudflare - Practical PQC deployment notes
TOP QUESTIONS
Why is Post-Quantum Cryptography urgent now?
Data harvested today could be decrypted later by quantum adversaries. Early migration reduces exposure and ensures crypto-agility.
Category: Risks
Which algorithms are leading in Post-Quantum Cryptography?
NIST selections include Kyber for key encapsulation and Dilithium for signatures, with other candidates for diverse use cases.
Category: Overview
How does hybrid key exchange help in PQC adoption?
It combines classical and post-quantum schemes, mitigating risks during transition while maintaining compatibility.
Category: Requirements
What systems are most impacted by Post-Quantum Cryptography?
TLS, VPNs, PKI, code signing, and IoT firmware need algorithm updates and key management changes.
Category: Example
What are common pitfalls migrating to PQC?
Ignoring inventory of crypto use, underestimating performance impacts, and failing to plan governance and compatibility testing.
Category: Mistakes
Is Quantum Key Distribution a replacement for PQC?
No. QKD addresses key exchange via physics, while PQC provides software-based algorithms for broad applications.
Category: Alternatives
How does PQC affect performance and key sizes?
Many PQC schemes use larger keys and signatures; performance varies by algorithm and hardware acceleration.
Category: Opinion
What regulatory guidance exists for PQC?
Agencies like NIST and ENISA recommend crypto-agility, inventory, pilot deployments, and phased migration strategies.
Category: Overview
How should organizations start with PQC?
Assess crypto dependencies, test hybrid schemes, update libraries and protocols, and plan staged rollouts.
Category: Requirements