What is Post-Quantum Cryptography and the PQC Threat?

# What is Post-Quantum Cryptography (PQC) and the Quantum Threat?  
*Defending Data Security Against the Quantum Computing Revolution*

---

Quantum computing is no longer just a theoretical curiosity—it represents a looming paradigm shift with major ramifications for cybersecurity. As quantum computers grow more powerful, they threaten to render most of today’s public-key cryptographic systems—like RSA, Diffie-Hellman, and Elliptic Curve Cryptography (ECC)—obsolete. The solution? **Post-quantum cryptography** (PQC), also known as quantum-resistant cryptography. In this guide, we’ll explore what PQC is, why it matters, and how organizations can begin their quantum-security journey—from beginner basics to hands-on tools for advanced professionals.

---

## Table of Contents

- [What is Post-Quantum Cryptography?](#what-is-post-quantum-cryptography)
- [The Fundamentals: Why Quantum Computers Break Modern Encryption](#the-fundamentals-why-quantum-computers-break-modern-encryption)
  - [The Mathematics Under Attack](#the-mathematics-under-attack)
  - [Shor’s & Grover’s Algorithms: The Quantum Tools](#shor-s-grovers-algorithms-the-quantum-tools)
- [Real-world Quantum Security Threats](#real-world-quantum-security-threats)
  - [Harvest Now, Decrypt Later Attacks](#harvest-now-decrypt-later-attacks)
  - [Non-Human Identity Vulnerabilities](#non-human-identity-vulnerabilities)
- [Post-Quantum Cryptography: Technical Overview](#post-quantum-cryptography-technical-overview)
  - [Key PQC Algorithms and Schemes](#key-pqc-algorithms-and-schemes)
  - [NIST PQC Standardization Efforts](#nist-pqc-standardization-efforts)
- [Practical Steps: Assessing and Implementing Post-Quantum Readiness](#practical-steps-assessing-and-implementing-post-quantum-readiness)
  - [Discovering Crypto Usage in Your Organization](#discovering-crypto-usage-in-your-organization)
  - [Code Sample: Scanning for RSA/ECC Usage in OpenSSL](#code-sample-scanning-for-rsaecc-usage-in-openssl)
  - [Parsing Results with Bash/Python](#parsing-results-with-bashpython)
- [Real-World Use Cases and Migration Strategies](#real-world-use-cases-and-migration-strategies)
  - [TLS/SSL Post-Quantum Upgrades](#tlsss-post-quantum-upgrades)
  - [Protecting Long-Lived Data](#protecting-long-lived-data)
  - [Machine Identities & PKI](#machine-identities--pki)
- [Challenges and Considerations](#challenges-and-considerations)
  - [Performance and Integration Issues](#performance-and-integration-issues)
  - [Hybrid Crypto Approaches](#hybrid-crypto-approaches)
- [Conclusion: Building a Quantum-Resilient Future](#conclusion-building-a-quantum-resilient-future)
- [References](#references)

---

## What is Post-Quantum Cryptography?

**Post-quantum cryptography (PQC)** refers to cryptographic algorithms believed to be secure against an attack by a realistic quantum computer. While classical computers struggle for centuries or millennia to crack today’s cryptography, quantum computers could theoretically break them in minutes or hours. PQC comprises a new class of algorithms specifically designed to resist these quantum attacks.

> **Definition**: "Post-quantum cryptography is designed to be resilient from attacks from future quantum computers that could break current encryption systems, ensuring ongoing protection of confidential information and communications."  
> *— Mastercard, [What is post-quantum cryptography?](https://www.mastercard.com/sg/en/news-and-trends/stories/2025/what-is-post-quantum-cryptography.html)*

PQC does not depend on quantum mechanics; it runs on today’s classical hardware. But its mathematical foundations (like lattices or codes) are fundamentally different from RSA/ECC’s prime factorization or discrete logarithm, which quantum algorithms can exploit.

---

## The Fundamentals: Why Quantum Computers Break Modern Encryption

### The Mathematics Under Attack

Most public key cryptosystems rely on mathematical “hard problems,” which are easy to compute but practically impossible to reverse without a secret (the key):

- **RSA**: Relies on the difficulty of factoring large composite numbers.
- **Diffie-Hellman**: Depends on the difficulty of the discrete logarithm problem.
- **Elliptic Curve Cryptography (ECC)**: Uses the elliptic curve discrete logarithm problem.

Classical computers have no effective shortcuts to solve these; brute-forcing takes far too long.

### Shor’s & Grover’s Algorithms: The Quantum Tools

Quantum computers use Qubits and quantum phenomena, such as superposition and entanglement, to process certain problems incredibly quickly. Two algorithms are of special interest:

1. **Shor’s Algorithm**: Can factor large numbers and compute discrete logs exponentially faster, cracking RSA, Diffie-Hellman, and ECC with ease as soon as large enough quantum computers exist.
2. **Grover’s Algorithm**: Speeds up brute-force search for symmetric keys, reducing the effective key strength by half (e.g., AES-256 would have quantum-level security like classical AES-128).

---

## Real-world Quantum Security Threats

### Quantum Computing Threatens the Math Behind RSA, Diffie-Hellman, and ECC

> "Quantum computing threatens the math behind RSA, Diffie-Hellman, and ECC, exposing organizations to data breaches, financial loss, and reputational harm."  
> *— Fortinet, [Quantum Security](https://www.fortinet.com/sitemap/explorer/ai-cybersecurity/quantum-security)*

#### What’s at risk?

- **TLS/SSL**: The backbone of secure web browsing uses RSA/ECC, making HTTPS vulnerable.
- **VPNs**: Widely use IKE and other protocols based on DH/ECC.
- **PKI/Certificates**: Machine, device, and code signing certificates use RSA/ECC keys.
- **Encrypted stored data**: If intercepted and stored today, encrypted data could be decrypted in the future ("harvest now, decrypt later").

### Harvest Now, Decrypt Later Attacks

Attackers may collect encrypted traffic now, intending to break the encryption once quantum computers are available. Sensitive files—like medical records or government secrets—often need to stay confidential for decades.

### Non-Human Identity Vulnerabilities

> "Quantum computing introduces immediate risks to non-human identity and long-term decryption threats..."  
> *— Okta, [Quantum Computing: Identity Security Risks](https://www.okta.com/blog/product-innovation/quantum-computing-identity-security-risks/)*

Non-human identities—such as machine credentials, IoT devices, or API tokens—often have long operational lifespans. These may become especially vulnerable if not upgraded promptly.

---

## Post-Quantum Cryptography: Technical Overview

### Key PQC Algorithms and Schemes

PQC algorithms are varied, but most fall into categories resistant to known quantum attacks:

- **Lattice-based Cryptography**  
  Examples:  
  - *Kyber*: Key encapsulation  
  - *Dilithium*: Digital signatures  
  - *NTRU*: Encryption/signatures
- **Code-based Cryptography**  
  Example:  
  - *Classic McEliece*: Key encapsulation
- **Multivariate Quadratic Equations**  
  Example:  
  - *Rainbow*: Digital signatures
- **Hash-based Cryptography**  
  Example:  
  - *SPHINCS+*: Stateless hash-based digital signatures
- **Isogeny-based Cryptography**  
  Example:  
  - *SIDH (Supersingular Isogeny Diffie-Hellman)* (Note: SIDH has had vulnerabilities discovered recently.)

#### Properties of PQC Algorithms

- Can run on conventional hardware (no quantum computers required).
- Key sizes and signatures are generally larger than with RSA/ECC.
- Performance may vary—latency and bandwidth implications must be considered.

### NIST PQC Standardization Efforts

The [National Institute of Standards and Technology (NIST)](https://csrc.nist.gov/projects/post-quantum-cryptography) has been running an open global competition since 2016 to establish new cryptographic standards.

#### NIST Recommendations (As of 2024):

- **Encryption/Key Exchange**: Kyber, Classic McEliece
- **Digital Signatures**: Dilithium, Falcon, SPHINCS+

These are expected to emerge as the new public-key standard suite post-quantum “day”.

---

## Practical Steps: Assessing and Implementing Post-Quantum Readiness

### Discovering Crypto Usage in Your Organization

A crucial first step is to inventory where and how your systems use vulnerable cryptography. This includes:

- Web servers (HTTPS, TLS/SSL)
- VPN appliances
- Databases
- Internal applications
- Certificates (PKI, code signing)
- Machine and IoT identities

### Code Sample: Scanning for RSA/ECC Usage in OpenSSL

Let’s use Bash and Python to scan and parse certificates and keys for vulnerable algorithms.

#### **Step 1: Scan a Directory for PEM Certificates**

**Scan for RSA/ECC Certificates & Keys in Linux**

```bash
#!/bin/bash
search_dir="/etc/ssl/certs"
for file in "$search_dir"/*.pem; do
    if openssl x509 -in "$file" -noout -text 2>/dev/null | grep -E "Public Key Algorithm"; then
        echo "[+] $file"
        openssl x509 -in "$file" -noout -text | grep "Public Key Algorithm"
    fi
done

This Bash script prints files and highlights their public key algorithm (RSA/ECC).

Step 2: Parse Key Types in Bulk with Python

Suppose you want to aggregate certificate types across your infrastructure:

import os
from cryptography import x509
from cryptography.hazmat.backends import default_backend

cert_dir = '/etc/ssl/certs'
summary = {}

for filename in os.listdir(cert_dir):
    if filename.endswith('.pem'):
        with open(os.path.join(cert_dir, filename), 'rb') as f:
            try:
                cert = x509.load_pem_x509_certificate(f.read(), default_backend())
                key_type = cert.public_key().__class__.__name__
                summary[key_type] = summary.get(key_type, 0) + 1
            except Exception as e:
                pass  # Not a certificate

print("Key type usage summary:")
for k,v in summary.items():
    print(f"{k}: {v}")

Output Example:

Key type usage summary:
RSAPublicKey: 87
EllipticCurvePublicKey: 43

Parsing Machine Identifiers

For scans on IoT devices or web certificate stores, adapt similar scripts to inventory key usage across all fleet endpoints.

Real-World Use Cases and Migration Strategies

TLS/SSL Post-Quantum Upgrades

Most internet connections rely on TLS/SSL using RSA/ECC key exchanges. To get quantum-ready:

Post-Quantum TLS: Many vendors now offer experimental TLS implementations using PQC hybrids (combining PQC with classical keys).
Example: Cloudflare’s post-quantum tunnel

OpenSSL Example: Generating a PQC Key

With PQC-enabled OpenSSL (from Open Quantum Safe):

# Generate a Kyber keypair for KEM
openssl req -new -newkey kyber512: -x509 -keyout kyber.key -out kyber.crt

Note: You’ll need a PQC-enabled OpenSSL build (not standard yet as of early 2024).

Encrypted emails, backups, legal documents, or government records might need decades of confidentiality. Upgrade these storage mechanisms to PQC algorithms as soon as possible, or re-encrypt with hybrid crypto.

Machine Identities & PKI

Enterprise Identity and Access Management (IAM) increasingly involves automated device and machine identities. With their long certificate lifetimes, failing to migrate these to PQC risks entire fleets becoming quantum-vulnerable.

Update PKI systems to support PQC/hybrid certificates.
Replace or re-key certificates for non-human identities.

Challenges and Considerations

Performance and Integration Issues

Larger keys and signatures: PQC schemes tend to use much larger keys/signatures than RSA/ECC, impacting network throughput/storage.
Hardware/software support: Not all devices, especially IoT and embedded, will easily support larger keys or new algorithms.
Cryptographic agility: Modern systems should support rapid switching of algorithms, easing upgrades and emergency patches.

Hybrid Crypto Approaches

Many early PQC deployments use hybrid cryptography—combining a classical and a quantum-resistant algorithm, so that message interception requires breaking both.

Example: X25519+Kyber key exchange for TLS
Provides resilience: even if PQC or classical is later found vulnerable, security remains.

Conclusion: Building a Quantum-Resilient Future

Post-quantum cryptography is not a distant or theoretical concern. Quantum computers could threaten much of today’s encrypted data sooner than many expect, and with "harvest now, decrypt later" attacks underway, it's vital to begin preparations now. By understanding PQC, inventorying cryptographic assets, and piloting migrations to quantum-safe schemes, organizations can secure their futures and avoid becoming tomorrow’s headline data breach. Adopting crypto-agility, leveraging hybrid algorithms, and staying abreast of NIST PQC standards ensures security that stands the test of time—and the oncoming quantum revolution.

What is Post-Quantum Cryptography and the PQC Threat?

Take Your Cybersecurity Career to the Next Level