The emergence of large-scale quantum computing poses a concrete threat to the public-key cryptographic algorithms widely used in today’s information technology systems. Over the past three decades, post-quantum cryptography (PQC) and quantum key distribution (QKD) have been proposed to protect against this threat. This article traces the formation and output of research and standards organizations that made these technologies viable for deployment, with particular attention to ETSI, and the NIST Post-Quantum Cryptography standardisation initiative. The article argues that necessity and standardisation, rather than any single technical contribution, was the decisive factor in taking this research from academia and laboratories into an interoperable ecosystem now reaching production deployment. The article further conjectures on reasons why PQC will see much broader adoption than QKD based on some basic principles of adoption of standardized technologies.
The emergence of large-scale quantum computing poses a concrete threat to the public-key cryptographic algorithms widely used in today’s information technology systems. Over the past three decades, post-quantum cryptography (PQC) and quantum key distribution (QKD) have been proposed to protect against this threat. This article traces the formation and output of research and standards organizations that made these technologies viable for deployment, with particular attention to ETSI, and the NIST Post-Quantum Cryptography standardisation initiative. The article argues that necessity and standardisation, rather than any single technical contribution, was the decisive factor in taking this research from academia and laboratories into an interoperable ecosystem now reaching production deployment. The article further conjectures on reasons why PQC will see much broader adoption than QKD based on some basic principles of adoption of standardized technologies.
The advent of quantum computing poses a significant threat to current cryptographic systems, particularly public-key algorithms such as RSA and ECC, which are vulnerable to quantum attacks like Shor's algorithm. Post-Quantum Cryptography (PQC) aims to develop and standardize quantum-resistant cryptographic algorithms to secure digital communications in the quantum era. This paper examines the current landscape of PQC, focusing on the evaluation and standardization efforts led by organizations such as the National Institute of Standards and Technology (NIST). We analyze the major families of quantum-resistant algorithms, including lattice-based, hash-based, code-based, multivariate, and isogeny-based cryptography, discussing their security guarantees, performance trade-offs, and implementation challenges. Furthermore, we review NIST's PQC standardization process, highlighting selected finalists and alternate candidates, and explore the ongoing transition challenges in adopting these algorithms across industries. Finally, we discuss future directions for PQC research, including hybrid cryptographic systems and the need for continued cryptanalysis to ensure long-term security. This work provides a comprehensive overview of the progress and challenges in deploying quantum-resistant cryptography to safeguard against emerging quantum threats.
Abstract The imminent threat posed by quantum computers to modern public key cryptography has spurred the development of post-quantum cryptography (PQC) algorithms. Over the last two decades, the field of PQC research has thrived, yielding a diverse range of algorithms resilient against quantum attacks. These PQC algorithms are undergoing selection and standardization by prominent bodies ; such as National Institute of Standards and Technology (NIST). However, the challenge remains substantial, given the monumental task of migrating numerous new devices to PQC algorithms. This complex, multi-decade transition from classical cryptography to PQC, necessitates careful survey of research articles to consider the current post quantum cryptographic schemes, and key protective strategies against quantum threats, implementation feasibility, compliance and challenges of implementations. This will provide insight and future directions for new researchers and organizations. .
Quantum computing poses a significant threat to conventional cryptographic systems that rely on the difficulty of mathematical problems such as integer factorization and discrete logarithms. These systems underpin much of the current security infrastructure, including public key cryptography and digital signatures. As quantum computers approach practical viability, there is an urgent need to transition to quantum-resistant cryptographic solutions that can secure digital communications against adversaries equipped with quantum capabilities. This paper explores the landscape of quantum-resistant cryptography, focusing on those algorithms that have emerged either as standards or as leading algorithm. Furthermore, the paper examines the progress of standardization efforts, such as the National Institute of Standards and Technology (NIST) Post-Quantum Cryptography (PQC) initiative, and the implications of deploying these algorithms in existing systems. By addressing the practical considerations for adoption, this study aims to provide a comprehensive overview of the current state and future directions of quantum-resistant cryptography, ensuring robust security in a post-quantum world.
In recent years, there has been steady progress in the creation of quantum computers. If large-scale quantum computers are implemented, they will threaten the security of many widely used public-key cryptosystems. Key-establishment schemes and digital signatures based on factorization, discrete logarithms, and elliptic curve cryptography will be most affected. Symmetric cryptographic primitives such as block ciphers and hash functions will be broken only slightly. As a result, there has been an intensification of research on finding public-key cryptosystems that would be secure against cryptanalysts with both quantum and classical computers. This area is often called post-quantum cryptography (PQC), or sometimes quantum-resistant cryptography. The goal is to design schemes that can be deployed in existing communication networks and protocols without significant changes. The National Institute of Standards and Technology is in the process of selecting one or more public-key cryptographic algorithms through an open competition. New public-key cryptography standards will define one or more additional digital signatures, public-key encryption, and key-establishment algorithms. It is assumed that these algorithms will be able to protect confidential information well in the near future, including after the advent of quantum computers. After three rounds of evaluation and analysis, NIST has selected the first algorithms that will be standardized as a result of the PQC standardization process. The purpose of this article is to review and analyze the state of NIST's post-quantum cryptography standardization evaluation and selection process. The article summarizes each of the 15 candidate algorithms from the third round and identifies the algorithms selected for standardization, as well as those that will continue to be evaluated in the fourth round of analysis. Although the third round is coming to an end and NIST will begin developing the first PQC standards, standardization efforts in this area will continue for some time. This should not be interpreted as meaning that users should wait to adopt post-quantum algorithms. NIST looks forward to the rapid implementation of these first standardized algorithms and will issue future guidance on the transition. The transition will undoubtedly have many complexities, and there will be challenges for some use cases such as IoT devices or certificate transparency.
The security of widely used public-key cryptographic algorithms (e.g., RSA, elliptic-curve cryptography) is expected to deteriorate once large-scale and fault-tolerant quantum computers are developed. The potential threat is severe because such algorithms underlie the IT infrastructure in modern society, such as in the financial industry. Although the threat is unlikely to materialize in the foreseeable future, the National Institute of Standards and Technology (NIST) has been in the process of standardizing post-quantum cryptography (PQC), which is designed to be secure against quantum computers. NIST has been scrutinizing the security and performance of 15 candidate algorithms (seven finalists and eight alternates). Standardization should accelerate the migration to PQC around the world, not only within the U.S. government. In this paper, we discuss recent trends in the R&D of quantum computers and the security risks of public-key cryptographic algorithms. Then we review NIST's ongoing progress in standardizing PQC and the responses of other organizations in support of the migration. Finally, we discuss future challenges for the real-world implementation of PQC.
The advancement of quantum computing poses a direct threat to classical cryptographic systems, necessitating the adoption of quantum-resistant encryption techniques to maintain data integrity, confidentiality, and trust in digital communications. This study presents a comprehensive evaluation of Quantum Key Distribution (QKD) protocols - specifically BB84, E91, and B92 - alongside post-quantum cryptographic algorithms, including lattice-based, hash-based, and multivariate-quadratic systems. These techniques represent two complementary approaches: QKD leverages quantum mechanical principles for secure key exchange, while PQC reinforces classical cryptography against quantum threats using novel mathematical constructs. A comparative analysis is conducted focusing on security robustness, computational efficiency, and deployment scalability. Real-world constraints such as infrastructure limitations, key management complexity, and algorithmic overhead are also critically examined. The paper also investigates the standardization efforts led by NIST, ISO, and ETSI, highlighting current challenges to global adoption, including the lack of interoperability frameworks and varying readiness levels across industries. The findings underscore the need for hybrid cryptographic models that integrate classical and quantum-resistant mechanisms, offering a pragmatic path forward as quantum capabilities mature. Future directions include integrating quantum cryptography with cloud security, advancing homomorphic encryption, and developing quantum-safe blockchain technologies. These innovations are crucial for building resilient cybersecurity infrastructures capable of supporting next-generation applications such as secure edge computing, confidential AI model sharing, and tamper-proof digital ledgers. This research provides timely insights into the evolving cryptographic landscape and emphasizes the urgency of preparing for the quantum future through interdisciplinary collaboration and proactive technological adaptation.