Securing Tomorrow's Information through Post-Quantum Cryptography | NIST

Jean-Christophe Deneuville

Khanim Avsuvarova

Г. С. Єлісєєва

Post-quantum cryptography is one of the key areas of development of modern means of information protection inconnection with the active progress of quantum technologies. Classical cryptographic algorithms, such as RSA and ECC,become vulnerable due to the Shor algorithm, which threatens the long-term security of information systems. The articleprovides an in-depth review of the current state of post-quantum cryptographic algorithms based on the results of the NationalInstitute of Standards and Technology (NIST) selection, and also analyzes the approaches proposed in recent scientificpublications. The characteristics of the Kyber, Dilithium, Falcon, and SPHINCS+ algorithms are considered in detail - theirsecurity parameters, performance, cryptographic strength, requirements for hardware resources, and possibilities of applicationin practical systems. Special attention is paid to the issues of integrating post-quantum algorithms into existing cryptographicprotocols, in particular, into public-key systems, public-key infrastructure, and secure communication channels. The keyproblems of implementing post-quantum cryptography in information infrastructures are considered, including: increased keysizes and cryptographic parameters, computational delays, compatibility with existing software and hardware solutions, and theneed to revise key management policies. The prospects for implementing post-quantum solutions in Ukraine are separatelyanalyzed, and practical recommendations are offered for a phased migration to such algorithms for state and corporate systems,taking into account the requirements for long-term data confidentiality and protection of critical information infrastructure.Keywords: post-quantum cryptography, quantum attacks, NIST PQC, Kyber, Dilithium, Falcon, SPHINCS+,cryptoresistance. References1. NIST. (n.d.). Post-Quantum Cryptography Standardization Project. https://csrc.nist.gov/projects/postquantum-cryptography.2. NIST. (2024). NIST releases first 3 finalized post-quantum encryption standards. https://www.nist.gov/newsevents.3. Dam, D. T., Mavroeidis, V., & Vishi, K. (2023). A survey of post-quantum cryptography: Start of a newquantum era. Cryptography, 7(3). https://doi.org/10.3390/cryptography7030040.4. Kokare, Priyanka & Vora, Deepali & Patil, Shruti & Kotecha, Ketan & Khairnar, Vaishali & Choudhury,Tanupriya & Kulkarni, Ambarish. (2024). Post Quantum Cryptography: A survey of Past and Future.https://www.researchgate.net/publication/382398375_Post_Quantum_Cryptography_A_survey_of_Past_and_Future.5. Chen, L., Jordan, S., Liu, Y.-K., Moody, D., Peralta, R., Perlner, R., Smith-Tone, D. (2016). Report on PostQuantum Cryptography. NIST IR 8105. https://doi.org/10.6028/NIST.IR.8105.6. Bos, J. W., et al. (2017). CRYSTALS-Kyber: A CCA-Secure Module-Lattice-Based KEM. https://pqcrystals.org/kyber/data/kyber-specification-round3.pdf.7. Ducas, L., et al. (2018). CRYSTALS-Dilithium: Digital Signatures from Module Lattices. https://pqcrystals.org/dilithium/data/dilithium-specification-round3.pdf.8. Pöppelmann, T., Oder, T., & Güneysu, T. (2015). High-Speed Ideal Lattice-Based Cryptography on 8-bit AVRMicrocontrollers. IACR Cryptology ePrint Archive, Report 2015/382. https://eprint.iacr.org/2015/382.pdf.9. Cloudflare. (2023). Post-Quantum Cryptography Support in TLS and Web Infrastructure.https://blog.cloudflare.com/tag/post-quantum-cryptography/.10. ETSI. (2020). Quantum-Safe Cryptography – An Overview. https://www.etsi.org/technologies/quantum-safecryptography.11. NCSC UK. (2020). Preparing for Quantum-Safe Cryptography. https://www.ncsc.gov.uk/whitepaper/preparing-for-quantum-safe-cryptography.12. Keyfactor & Ponemon Institute. (2023). State of Machine Identity Management Report. Keyfactor, Inc.https://www.keyfactor.com.13. Shor, P. (1994). Algorithms for quantum computation: Discrete logarithms and factoring. Proceedings of the35th Annual Symposium on Foundations of Computer Science.14. Bernstein, D., & Lange, T. (2017). Post-Quantum Cryptography. Springer. https://doi.org/10.1007/978-3-540-88702-7.15. Grover, L. (1996). A fast quantum mechanical algorithm for database search. STOC '96.https://doi.org/10.1145/237814.237866.16. Mosca, M. (2018). Cybersecurity in an era with quantum computers: Will we be ready? IEEE Security &Privacy, 16(5), 38–41. https://doi.org/10.1109/MSP.2018.3761723.17. Prest, T. (2020). Efficient implementation issues in Falcon. https://falcon-sign.info.18. SPHINCS+ Team. (n.d.). SPHINCS+ Specification. https://sphincs.org/data/sphincs+-specification.pdf.

Timothy Olatunji Ogundola

Quantum computers are growing faster every year, and that progress puts today’s classical encryption at serious risk. Once these machines reach full power, staple protocols like RSA and elliptic-curve cryptography SSDs become tomorrow's digital lockpicks, threatening the secrecy of everyday online banking. In response, many researchers are rallying behind post-quantum cryptography (PQC), a fresh toolkit meant to shrug off quantum decoding tricks. This paper examines how prepared the banking world is for that shift, using a systematic review of literature, pilots, regulations, and benchmarks issued between 2018 and 2025. Results show firms are already alert, testing hybrid systems alongside NIST-approved lattice schemes such as CRYSTALS-Kyber and Dilithium on the road to safer financial transactions. Serious roadblocks linger, such as sluggish system speed, outdated code that cant easily swap algorithms, and a design process that ignores most users. On top of that, regulators and intergovernmental groups are stepping up to define what quantum-proofing looks like and when banks must do it. The paper therefore argues that hooking post-quantum cryptography into everyday banking is doable, and the industry cares about it, yet it still needs joint spending on new hardware, clear rules, and tutorials for customers. Suggested actions are to build crypto-agile platforms, roll out mixed classical-plus-quantum methods in the meantime, and get all players talking so that online and mobile payments stay safe, smooth, and ready for whatever the quantum future brings.

Anastase Nakassis, Joshua C. Bienfang, Paul Johnson +4 more

Project Scientist, Society for Electronic Transactions and Security (SETS), Chennai (Tamil Nadu) India., Renita J, Edna Elizabeth N. +2 more

Cryptography is a term that safeguards the security of electronic banking transactions, and emails, and most importantly our country relies on cryptography for national security purposes. Post Quantum Cryptography (PQC) has a major aim of developing newer cryptographic schemes that make the cryptosystem secure against quantum computers. This is a state-of-the-art research topic, and it is encouraged by some security agencies like the National Security Agency (NSA). This paper presents a concise and up-to-date review of post-quantum cryptographic (PQC) algorithms submitted to the National Institute of Standards and Technology (NIST) for standardization. Highlighting the need for cryptographic resilience in the era of quantum computing, the study focuses on the technical evaluation of candidate algorithms, including their performance in terms of time and space efficiency. It also examines the progression of these algorithms through NIST’s multi-round selection process, highlighting key developments and implementation challenges. The paper aims to provide researchers with a clear overview of the current state of PQC standardization and the practical considerations involved in deploying secure, quantum-resistant cryptographic solutions.