Home

Quantum-Safe — The Threat and the Standards

Why the clock is already ticking and what replaces today's cryptography — harvest-now-decrypt-later, exactly what breaks in RSA, ECC, PKI and TLS, the new NIST post-quantum standards, and how ML-KEM, ML-DSA and SLH-DSA work.

1Harvest Now, Decrypt LaterAttackers can save encrypted data today and read it when quantum machines mature, so long-lived secrets need protection before Q-day.Threat and Standards

2What Breaks — RSA, ECC, PKI, TLSQuantum attacks do not just threaten algorithms; they undermine the certificates, handshakes, and signatures that make everyday systems trustworthy.Threat and Standards

3NIST's Post-Quantum StandardsThe first finished NIST post-quantum standards define one new tool for key exchange and two for digital signatures.Threat and Standards

4ML-KEM ExplainedML-KEM is the new standard for quantum-safe key exchange: a way to agree on a shared secret without sending it in the clear.Threat and Standards

5ML-DSA and SLH-DSA ExplainedPost-quantum signatures replace RSA and elliptic-curve signing with two standards: one fast default, one conservative backup.Threat and Standards