Quantum computing threatens the classical cryptographic systems underpinning financial infrastructure, exposing payment platforms, interbank networks, and digital services to Harvest-Now-Decrypt-Later (HNDL) risks. This study systematically reviews quantum threats and post-quantum cryptographic readiness in the financial sector to assess preparedness, identify implementation challenges, and synthesize migration pathways aligned with emerging standards. A PRISMA-guided review of 17 peer-reviewed studies published between 2020 and 2025 was conducted, examining quantum threat models, post-quantum cryptographic schemes, quantum key distribution architectures, and sector-specific deployment barriers. The review finds that lattice-based schemes, especially CRYSTALS-Kyber and CRYSTALS-Dilithium, are the leading candidates for financial adoption, while hybrid cryptographic approaches offer the most feasible transition strategy. However, the current evidence base is predominantly simulation-driven, with limited real-world deployment and validation. The study provides a sector-specific synthesis of quantum threats, post-quantum readiness, and migration pathways in financial systems, and advances an integrated readiness and migration framework based on cross-study thematic analysis.
Quantum computing threatens the classical cryptographic systems underpinning financial infrastructure, exposing payment platforms, interbank networks, and digital services to Harvest-Now-Decrypt-Later (HNDL) risks. This study systematically reviews quantum threats and post-quantum cryptographic readiness in the financial sector to assess preparedness, identify implementation challenges, and synthesize migration pathways aligned with emerging standards. A PRISMA-guided review of 17 peer-reviewed studies published between 2020 and 2025 was conducted, examining quantum threat models, post-quantum cryptographic schemes, quantum key distribution architectures, and sector-specific deployment barriers. The review finds that lattice-based schemes, especially CRYSTALS-Kyber and CRYSTALS-Dilithium, are the leading candidates for financial adoption, while hybrid cryptographic approaches offer the most feasible transition strategy. However, the current evidence base is predominantly simulation-driven, with limited real-world deployment and validation. The study provides a sector-specific synthesis of quantum threats, post-quantum readiness, and migration pathways in financial systems, and advances an integrated readiness and migration framework based on cross-study thematic analysis.
The conventional cryptographic systems that underpin the world's financial infrastructure are under grave threat as quantum computing spreads. The financial industry must immediately investigate quantum-safe alternatives, as widely used public-key algorithms such as RSA and Elliptic Curve Cryptography (ECC) are theoretically susceptible to Shor's quantum algorithm, while symmetric schemes face reduced security margins under Grover's algorithm. The Systematic Literature Review (SLR) presented in this paper was carried out in compliance with PRISMA 2020 guidelines. Web of Science, Scopus, and Google Scholar were searched using Boolean keywords to find articles published between 2013 and 2025. 53 high-quality studies were chosen from an original corpus of N = 1,654 publications utilizing the Mixed Methods Appraisal Tool (MMAT), systematic screening, and eligibility evaluation. Three main paradigms for quantum cryptography were found: Post-Quantum Cryptography (PQC), which includes the NIST-standardised lattice-based algorithms CRYSTALS-Kyber and CRYSTALS-Dilithium (NIST, 2022); Quantum Key Distribution (QKD), which offers information-theoretic security through the BB84, E91, and CV-QKD protocols; and hybrid quantum-classical architectures that combine near-term deployment with long-term quantum resilience. The operational viability of quantum-secure financial communication has been confirmed through real-world deployments by JPMorgan Chase, HSBC, CaixaBank, and Danske Bank. Given the 'harvest now, decrypt later' (HNDL) threat paradigm, the evidence clearly shows that upgrading to quantum-safe cryptography is an essential operational necessity. Complementary approaches with different trade-offs in cost, scalability, and implementation maturity include QKD, PQC, and hybrid frameworks. To protect the integrity of international financial systems, financial regulators and institutions must coordinate faster adoption roadmaps aligned with NIST PQC standardisation timelines.
Quantum computing threatens the security foundations of global financial systems, exposing long-lived data and signed digital assets to “harvest-now, decrypt-later” attacks. While the timeline for cryptographically relevant quantum computers remains uncertain, regulatory signals from the USA, UK, EU, Canada, and Australia converge: financial institutions and payment infrastructures must begin migrating to post-quantum cryptography (PQC) now to preserve confidentiality, integrity, and systemic stability. This paper maps emerging standards and roadmaps, contrasting binding requirements like the EU’s DORA crypto-agility provisions with non-binding guidance from NIST, ENISA, and ETSI. Despite a shared intent to secure high-risk use cases by 2030–2031 and complete migration by 2035, divergences in enforcement and milestones create uncertainty for cross-border banks and financial market infrastructures. In parallel, technical adoption is advancing: major browsers, cryptographic libraries (OpenSSL/BoringSSL), and CDNs (e.g., AWS CloudFront) have deployed hybrid PQC key exchange in TLS 1.3, proving confidentiality defenses are viable at internet scale. The paper synthesizes historical transition lessons, sector-specific regulatory drivers, and operational constraints in payment infrastructures to derive a new, principle-based migration: crypto-agility, risk-prioritized scoping, hybrid deployment, vendor and supply-chain alignment, independent testing, and proactive supervisory engagement. Acting now reduces long-tail exposure and ensures readiness for imminent compliance and interoperability deadlines.
The traditional cryptographic methods used to protect healthcare data, especially for the long-term storage of medical imaging records, are becoming increasingly threatened by the quick development of quantum computing. The purpose of this study is to assess the challenges, efficacy, and preparedness of integrating Post-Quantum Cryptography (PQC) into healthcare information systems. Twenty peer-reviewed studies published between 2020 and 2025 were analysed following the Preferred Reporting Items for Systematic Reviews and Meta Analyses (PRISMA) protocol. The review was conducted using a systematic research design that included qualitative thematic synthesis, predetermined eligibility criteria, and database searching. According to the results, lattice-based PQC schemes, specifically, CRYSTALS-Kyber for encryption and CRYSTALS-Dilithium for authentication, show great promise because of their effectiveness, resilience, and suitability for decentralized architectures like blockchain and Internet-of-Medical-Things environments. Nonetheless, the review points out a notable deficiency of empirical assessment in actual healthcare settings, particularly with regard to cloud-based platforms and Picture Archiving and Communication Systems utilized in medical imaging processes. Scalability limitations, intricate key-management specifications, system interoperability restrictions, and the requirement for conformity with regulatory and compliance frameworks are some of the major issues noted. The results indicate that lattice-based PQC schemes have great promise, deployment readiness remains largely at the conceptual and experimental stage, particularly for cloud-based PACS environments. Real-world implementation validation in a healthcare setting has not been achieved.
Quantum computing poses an existential threat to public-key cryptography, with Shor's algorithm capable of breaking RSA and elliptic curve systems once cryptographically relevant quantum computers (CRQCs) emerge. While post-quantum cryptography (PQC) offers algorithmic solutions, organizational readiness extends beyond technical implementation to encompass governance, interoperability, and adaptive capacity. This review synthesizes the quantum threat landscape, evaluates NIST-standardized PQC algorithms through quantitative performance analysis, and examines global standardization dynamics. We introduce a novel Quantum Readiness Maturity Model (QRMM) that enables organizations to assess and advance their preparedness across five dimensions: cryptographic infrastructure, governance frameworks, sectoral adaptation, interoperability resilience, and strategic agility. Applying this model to finance, telecommunications, and defense sectors reveals systematic gaps in migration planning and crypto-agility. Our analysis demonstrates that quantum readiness requires treating cryptographic transformation as a strategic enterprise capability rather than a purely technical upgrade. The proposed framework provides actionable pathways for practitioners while identifying critical research directions in hybrid deployment strategies, post-quantum PKI architectures, and algorithmic diversity.
The rapid advancement of quantum computing presents both unprecedented opportunities and significant threats to modern cybersecurity. As quantum processors progress toward practical large-scale deployment, widely used cryptographic systems, particularly RSA, ECC, and other public-key mechanisms, face the risk of becoming obsolete. This review examines how quantum technologies can be strategically leveraged to enhance cybersecurity while simultaneously addressing the vulnerabilities introduced by quantum-enabled attacks. A systematic analysis of 35-40 peer-reviewed studies was conducted to evaluate developments in post-quantum cryptography, quantum-resistant security protocols, Quantum Key Distribution (QKD), and hybrid classical–quantum defense architectures. The findings reveal a rapidly evolving research landscape focused on resilient lattice-based cryptography, scalable quantum-safe communication frameworks, and early-stage quantum machine learning applications for intrusion detection. The review highlights both the promise and current limitations of quantum-driven security solutions, including hardware constraints, integration challenges, and the need for global standardization. The study underscores the urgency for governments, industries, and researchers to adopt quantum-ready cybersecurity strategies and accelerate the transition to quantum-resilient infrastructures.
Financial institutions depend on RSA, elliptic-curve cryptography, and Diffie-Hellman key exchange for authentication, transaction integrity, and confidentiality: algorithms a sufficiently large quantum computer would break outright rather than merely weaken. No cryptographically relevant quantum computer exists yet, but the harvest-now-decrypt-later threat means data intercepted today remains at risk once one does, and financial data's long retention obligations make this a present-day planning problem rather than a distant one. This paper assesses the readiness of financial institutions in Africa to adopt post-quantum cryptography (PQC) and develops a framework for transitioning to quantum-resistant cryptographic systems. Five specific objectives drive that work: examining PQC awareness among African financial institutions, assessing current cryptographic exposure, identifying technical, financial, organizational, regulatory, and skills-related adoption barriers, evaluating the suitability of finalized PQC algorithms for financial applications, and developing a readiness and migration framework fitted to African constraints. The study's design is literature-based and conceptual: it synthesizes verified secondary evidence rather than reporting original fieldwork, and no institution was surveyed or interviewed. Its contributions include an integrated Technology-Organization-Environment/Diffusion-of-Innovation model with crypto-agility as a mediating capability, a six-dimension readiness instrument, and an algorithm-evaluation framework. The central contribution, a six-phase migration framework addressing three gaps found in every existing precedent, is paired with an adapted risk-based prioritization matrix. Headline recommendations call on institutions to name a single accountable owner and begin scoped discovery now, on regulators to extend draft cybersecurity guidance to address cryptographic agility explicitly, and on future research to empirically test the proposed model against real institutions.