← Back to Latest

Quantum-Safe Cryptography: The Race to Upgrade Everything

In 2026, a massive, largely invisible project is underway across the technology industry: migrating the world's cryptographic systems to algorithms that can survive a future where quantum computers can break the encryption that currently protects everything from banking transactions to state secrets.

This is the post-quantum cryptography (PQC) migration, and it is one of the largest cryptographic transitions in history — comparable to the shift from SHA-1 to SHA-2 or from RSA to elliptic curve cryptography, but spanning far more systems and far more urgency.

The threat: quantum computers and encryption

Most of the world's public-key cryptography — the systems that secure HTTPS connections, digital signatures, VPNs, and encrypted communications — relies on two mathematical problems: integer factorization (used by RSA) and discrete logarithms (used by Diffie-Hellman and elliptic curve cryptography). These problems are hard for classical computers — effectively impossible to solve at the key sizes in common use.

Quantum computers running Shor's algorithm can solve both problems efficiently — in theory. The question is when practical quantum computers large enough to do this will exist. Estimates vary, but the cryptographic community has converged on a clear position: waiting for certainty is not a viable strategy. Migration takes years — in some cases decades — and must begin before the threat is fully realized, because systems deployed today with long lifespans (infrastructure, embedded devices, archived data) need to be secure for decades to come.

What post-quantum cryptography is

Post-quantum cryptography refers to cryptographic algorithms that are believed to be secure against both classical and quantum computers. These are not quantum technologies — they are classical algorithms designed to resist quantum attacks. The main families include:

Lattice-based cryptography — the most mature and widely adopted PQC family, including CRYSTALS-Kyber (for key encapsulation) and CRYSTALS-Dilithium (for digital signatures). These are based on the hardness of problems involving high-dimensional lattices.

Hash-based signatures — schemes like SPHINCS+ that rely only on the security of hash functions, offering a conservative security guarantee with slower performance.

Code-based cryptography — based on the hardness of decoding random linear codes, including the Classic McEliece algorithm.

Multivariate and isogeny-based cryptography — other families with different tradeoffs in performance, key size, and security assumptions.

The NIST standardization process

The U.S. National Institute of Standards and Technology (NIST) has led a multi-year process to standardize post-quantum cryptographic algorithms. After evaluating dozens of candidates, NIST published final standards for several algorithms in 2024, including ML-KEM (based on CRYSTALS-Kyber) for general encryption and ML-DSA (based on CRYSTALS-Dilithium) for digital signatures. Additional standards for stateful hash-based signatures and other use cases followed.

These standards are now being incorporated into protocols and systems worldwide — TLS 1.3 extensions, cryptographic libraries, operating systems, and enterprise security products. The transition is underway, but it is a large one.

The scale of the migration

The PQC migration is not a software update. It touches every layer of the technology stack:

The challenge is compounded by performance tradeoffs. Many PQC algorithms have larger key sizes, ciphertext sizes, or signature sizes than their classical counterparts. Some are slower. Some require new hardware capabilities. Hybrid deployments — combining classical and PQC algorithms so that security is maintained even if one algorithm is broken — add further complexity.

Crypto-agility: designing for change

One of the key lessons from the PQC transition is the importance of crypto-agility — designing systems so that cryptographic algorithms can be changed without modifying the surrounding infrastructure. Systems that hard-code specific algorithms into their architecture will face the same migration challenge again when (not if) the next cryptographic transition arrives.

Crypto-agility means: abstracting cryptographic operations behind interfaces that can swap algorithms, maintaining support for multiple algorithms during transitions, versioning cryptographic protocols so clients and servers can negotiate which algorithms to use, and planning for algorithm replacement as a normal operational activity rather than an emergency.

Where the industry stands in 2026

The PQC migration is in early but accelerating stages. NIST standards are published and being incorporated into major cryptographic libraries. Some large technology companies and government agencies have begun deploying PQC in high-security contexts. Cloud providers are beginning to offer PQC options for key management and TLS.

But the vast majority of systems still rely exclusively on classical cryptography. The transition will take years — likely a decade or more for full deployment across the global technology infrastructure. The urgency is real: quantum computing is advancing, and the cryptographic community's consensus is that the time to begin migration is now, not when quantum computers are powerful enough to break current algorithms.

For technology organizations, the practical steps are clear: inventory cryptographic systems and their dependencies, identify systems with long-term sensitivity or long lifespans, begin testing PQC algorithms in non-production environments, plan for crypto-agility in new systems, and develop a migration roadmap that accounts for the scale and complexity of the transition.