The threat quantum computers pose to current cryptographic algorithms is not just a future problem. It needs to be acted on now. Attackers could be exfiltrating and storing data right now, intending to decrypt it once a cryptographically relevant quantum computer has been built. Since this is a relatively new threat, it has only recently been discussed in CYBE 3310: Application of Cryptographic Concepts to Cyber Security. This work introduces a new lab assignment for the class that helps students become more familiar with quantum algorithms and Post-Quantum Cryptography solutions. The lab consists of three parts. The first two parts focus on Shor’s and Grover’s algorithms, allowing the students to build quantum circuits using Qiskit, IBM’s quantum software development kit, and see how they threaten RSA, elliptic-curve cryptography, and AES. The third part is an opportunity for students to become familiar with ML-KEM and ML-DSA, the Post-Quantum Cryptography algorithms standardized by NIST for key exchange and digital signatures.
The threat quantum computers pose to current cryptographic algorithms is not just a future problem. It needs to be acted on now. Attackers could be exfiltrating and storing data right now, intending to decrypt it once a cryptographically relevant quantum computer has been built. Since this is a relatively new threat, it has only recently been discussed in CYBE 3310: Application of Cryptographic Concepts to Cyber Security. This work introduces a new lab assignment for the class that helps students become more familiar with quantum algorithms and Post-Quantum Cryptography solutions. The lab consists of three parts. The first two parts focus on Shor’s and Grover’s algorithms, allowing the students to build quantum circuits using Qiskit, IBM’s quantum software development kit, and see how they threaten RSA, elliptic-curve cryptography, and AES. The third part is an opportunity for students to become familiar with ML-KEM and ML-DSA, the Post-Quantum Cryptography algorithms standardized by NIST for key exchange and digital signatures.
The impressively fast development of quantum computing is a serious threat to classical public-key cryptography, and algorithms such as Shor's and Grover's will render RSA and elliptic curve systems essentially useless as soon as a cryptanalytically relevant quantum computer becomes available. Although it is still some way off before such machines are available, the harvest-now-encrypt-later threat highlights the need for proactive defense. In response, the National Institute of Standards and Technology (NIST) published the first post-quantum cryptography standards in 2024, including ML-KEM (Kyber) for key establishment, ML-DSA (Dilithium) for digital signatures and SLH-DSA (SPHINCS+) as a stateless hash-based alternative. This paper is a summary of the evolving post-quantum landscape, starting with the standards and their underlying security and then moving on to migration policies such as CNSA 2.0 and CISA, NSA and NIST guidance. It also looks at integration patterns for important protocols such as TLS, IPsec, SSH, and code signing. A performance, interoperability and overhead evaluation methodology is presented with results showing that hybrid deployment and crypto-agile architectures make PQC adoption a viable option. The paper concludes by providing a governance-oriented roadmap, where inventory, prioritization and pilot deployments are identified as near-term actions, with open questions remaining on performance optimization, implementation security and algorithm resilience over time.
Cryptography has evolved from ancient substitution ciphers to modern mathematical algorithms including Rivest–Shamir–Adleman (RSA), elliptic curve cryptography (ECC), and advanced encryption standard (AES) that form the core of security systems, along with the major information security objectives: confidentiality, integrity, authenticity, availability, accountability, nonrepudiation, and privacy and their practical applications in protocols such as transport layer security (TLS), Internet Protocol Security (IPsec), and Secure/Multipurpose Internet Mail Extensions (S/MIME). The security of RSA, ECC, and symmetric-key ciphers has been threatened by quantum computers that exploit Shor’s and Grover’s algorithms. In response to this quantum threat, NIST has standardized post-quantum cryptographic PQC) algorithms: ML-KEM, a lattice-based key encapsulation mechanism and ML-DSA, a lattice-based digital signature scheme. This chapter surveys the development of cryptographic systems from transposition ciphers to post-quantum cryptography, examining their mathematical foundations, operational mechanisms, and respective security properties. In addition to these, the PQC algorithms have been implemented in TLS 1.3, and a comparative analysis has been performed. The study traces the history of cryptography while understanding post-quantum standards as the necessary foundation for long-term information security in the quantum era.
Quantum computing poses an existential threat to classical public-key cryptography, particularly RSA and elliptic-curve systems, which form the backbone of secure communication, authentication, and digital trust. Once scalable quantum computers emerge, algorithms such as Shor’s will be capable of breaking these schemes, jeopardizing confidentiality and integrity across the internet and enterprise systems. Post-quantum cryptography (PQC) offers a viable defense, providing quantum-resistant algorithms that can be implemented on today’s hardware and protocols. Recent standardization milestones—including NIST’s approval of ML-KEM (Kyber) for key establishment, ML-DSA (Dilithium) and SLH-DSA (SPHINCS+) for signatures, and the selection of HQC as a complementary KEM—mark a turning point for practical adoption. This paper surveys the quantum threat model, algorithm families, performance trade-offs, and integration patterns such as hybrid modes and crypto-agile architectures. It further outlines a phased migration roadmap for enterprises, emphasizing harvest-now-decrypt-later risks and compliance imperatives. By bridging technical, operational, and policy perspectives, the study provides actionable guidance to prepare organizations for a secure and quantum-resilient future.
Abstract It is viewed as revolutionary technology, offering incredible potential in terms of computing power within different scientific and industrial sectors. Quantum computers provide remarkable computing power; however, they also present significant security risks to existing public-key cryptography systems used to secure digital communication, online banking systems, government, medical applications, cloud computing systems, and IoT systems. Security of commonly used encryption schemes like RSA, DH, and ECC depends on mathematical problems that are impossible for classical computers to solve but can be easily resolved with the help of powerful enough quantum computers by using Shor’s algorithm. Furthermore, Grover’s algorithm makes exhaustive search attacks much faster, thus effectively lowering the security level of symmetric encryption schemes since it provides the speed-up for brute-force attacks. Post-Quantum Cryptography (PQC) turned out to be an effective and scalable method to protect digital data from attacks using quantum computing. In contrast to quantum cryptography, which requires a special quantum communication channel, PQC uses classical cryptographic algorithms that cannot be broken down by either classical or quantum computer due to certain mathematical problems. This research paper offers an extensive exploration of post-quantum cryptography through the analysis of the development of quantum computing, weaknesses of current cryptographic techniques, and mathematics behind quantum-resistant algorithms. Moreover, this paper explores the major classes of PQC techniques such as lattice-based, code-based, hash-based, multivariate, and isogeny-based cryptography and provides details about their security and application. Moreover, the report gives an overview of the NIST Post-Quantum Cryptography Standardization Project and analyzes recent standardizations of quantum-proof algorithms to be utilized in future digital infrastructures. Keywords: Post-Quantum Encryption, Quantum Security, Quantum-Proof Public-Key Cryptography, Lattice-Based Security Protocols, ML-KEM Key Encapsulation Mechanism, ML-DSA Digital Signature Algorithm, NIST Post-Quantum Cryptography, Contemporary Cybersecurity, Secure Communications, Cryptographic Algorithms.
Quantum computing is poised to revolutionize numerous fields, including cryptography. Traditional encryption algorithms that form the backbone of modern digital security, such as RSA and Elliptic Curve Cryptography (ECC), rely on computationally difficult problems—specifically, the factorization of large integers and the solving of discrete logarithms. However, quantum computers, leveraging the principles of quantum mechanics, present the potential to solve these problems in polynomial time through algorithms like Shor’s Algorithm, rendering these encryption methods insecure. The development of sufficiently powerful quantum computers could therefore undermine the confidentiality and integrity of sensitive digital information across the internet. This paper explores the threats posed by quantum computing to traditional cryptographic systems, with a focus on the impact of Shor’s Algorithm and Grover’s Algorithm. In addition, the paper reviews ongoing efforts to develop quantum-resistant cryptographic techniques, particularly in the area of post-quantum cryptography (PQC). It discusses the NIST Post-Quantum Cryptography Standardization project, the promising alternatives to current encryption schemes, and the potential for quantum key distribution (QKD) as a solution. The paper concludes with a reflection on the urgent need to prepare for quantum computing's eventual impact on digital security and the steps that can be taken to mitigate these risks in the transition to quantum-safe cryptography.
The emergence of quantum computing presents both significant opportunities and critical challenges for modern cybersecurity. While quantum systems promise advances in science, engineering, and artificial intelligence, they also pose a substantial threat to classical cryptographic techniques such as RSA, ECC, and other widely deployed public-key mechanisms. Quantum algorithms including Shor’s and Grover’s are expected to compromise these systems, placing sensitive data, financial infrastructures, and national security at risk. This paper examines the growing field of quantum-resistant, or post-quantum, cryptography with a focus on identifying constructions capable of withstanding quantum attacks. It provides a systematic overview of major post-quantum cryptographic families, including lattice-based, hash-based, code-based, multivariate, and isogeny-related schemes, and evaluates their current security assumptions, practical efficiency, and readiness for real-world deployment. Beyond technical considerations, the paper highlights the organizational and workforce implications of transitioning to quantum-safe systems, emphasizing the need for coordinated global standards and sustained cybersecurity training. This study underscores that building a quantum-secure digital future requires not only adopting resilient algorithms but also strengthening collaborative, adaptive, and proactive security practices.