Contemporary real-time payment processing systems rely on classical asymmetric cryptographic primitives — RSA, Elliptic Curve Diffie-Hellman (ECDH), and ECDSA — that will become computationally vulnerable with the advent of cryptographically relevant quantum computers (CRQCs). This paper introduces NGCMF (Next-Generation Cryptographic Migration Framework), a comprehensive, seven-layer methodology engineered to guide payment processors, card networks, and financial institutions through a structured, auditable transition to NIST-standardised post-quantum cryptography (PQC). NGCMF spans the full cryptographic lifecycle: from automated cryptographic asset discovery and quantum risk classification, through hybrid classical/PQC architecture design and phased production rollout, to long-term cryptographic agility governance. The framework addresses the HARVEST NOW, DECRYPT LATER (HNDL) threat model — wherein adversaries archive encrypted transaction data today for future quantum decryption — as a primary migration driver, alongside conventional forward-secrecy and integrity requirements. We instantiate NGCMF across four real-world payment system archetypes: an ISO 8583 card network switch, an open-banking REST API hub, a CBDC settlement node, and a cross-border SWIFT MX messaging gateway. Performance evaluations demonstrate that ML-KEM-768 (FIPS 203) introduces TLS 1.3 handshake overhead of 1.4–2.3 ms, within real-time SLA tolerances, while ML-DSA (FIPS 204) requires HSM horizontal scaling for high-frequency signing workloads. Regulatory mapping confirms alignment with PCI DSS v4.0, ISO 27001:2022, EU DORA, and NIST SP 800-57 Part 1 Rev. 5. The NGCMF provides financial institutions with a practitioner-oriented, standards-grounded roadmap for achieving quantum-resilient payment infrastructure within a 12–18 month deployment horizon.
Contemporary real-time payment processing systems rely on classical asymmetric cryptographic primitives — RSA, Elliptic Curve Diffie-Hellman (ECDH), and ECDSA — that will become computationally vulnerable with the advent of cryptographically relevant quantum computers (CRQCs). This paper introduces NGCMF (Next-Generation Cryptographic Migration Framework), a comprehensive, seven-layer methodology engineered to guide payment processors, card networks, and financial institutions through a structured, auditable transition to NIST-standardised post-quantum cryptography (PQC). NGCMF spans the full cryptographic lifecycle: from automated cryptographic asset discovery and quantum risk classification, through hybrid classical/PQC architecture design and phased production rollout, to long-term cryptographic agility governance. The framework addresses the HARVEST NOW, DECRYPT LATER (HNDL) threat model — wherein adversaries archive encrypted transaction data today for future quantum decryption — as a primary migration driver, alongside conventional forward-secrecy and integrity requirements. We instantiate NGCMF across four real-world payment system archetypes: an ISO 8583 card network switch, an open-banking REST API hub, a CBDC settlement node, and a cross-border SWIFT MX messaging gateway. Performance evaluations demonstrate that ML-KEM-768 (FIPS 203) introduces TLS 1.3 handshake overhead of 1.4–2.3 ms, within real-time SLA tolerances, while ML-DSA (FIPS 204) requires HSM horizontal scaling for high-frequency signing workloads. Regulatory mapping confirms alignment with PCI DSS v4.0, ISO 27001:2022, EU DORA, and NIST SP 800-57 Part 1 Rev. 5. The NGCMF provides financial institutions with a practitioner-oriented, standards-grounded roadmap for achieving quantum-resilient payment infrastructure within a 12–18 month deployment horizon.
The imminent arrival of cryptographically relevant quantum computers poses an existential threat to the RSA, ECC, and ECDH primitives that underpin virtually every real-time payment gateway in operation today. This paper presents PQPG-MF, a structured six-phase migration framework designed to guide financial institutions and payment service providers through a comprehensive, risk-managed transition to NIST-standardised post-quantum cryptography (PQC) algorithms — specifically ML-KEM, ML-DSA, and SLH-DSA. The framework integrates hybrid classical/post-quantum cryptography during the transitional period, cryptographic agility engineering, hardware security module (HSM) compatibility planning, and regulatory compliance alignment covering PCI DSS v4.0 and ISO 27001:2022. We evaluate the framework against three reference architectures — a high-throughput card network gateway, an open-banking API hub, and a central bank digital currency (CBDC) node — demonstrating feasibility across diverse latency, throughput, and compliance constraints. Performance benchmarks reveal that ML-KEM-768 introduces handshake overhead of 1.4–2.1 ms over baseline TLS 1.3 in production-grade deployments, within the tolerance of real-time payment SLAs. Our threat modelling analysis using the HARVEST NOW, DECRYPT LATER attack vector underscores the urgency of migration even before large-scale quantum computers are available. The PQPG-MF framework provides actionable guidance supported by tooling recommendations, governance considerations, and a phased roadmap adaptable to institutions of varying scale.
The imminent advent of a Cryptographically Relevant Quantum Computer (CRQC) poses an existential threat to the US financial infrastructure.Current payment rails including FedWire, CHIPS, and ACH rely on RSA and ECC standards that are mathematically vulnerable to Shor's Algorithm.This facilitates "Harvest Now, Decrypt Later" (HNDL) attacks, where encrypted data is intercepted today for future decryption.This paper evaluates the migration to NIST-standardized Post-Quantum Cryptography (PQC), specifically ML-KEM and ML-DSA.We analyze the architectural challenges of integrati ng these primitives into ISO 20022 formats, focusing on the trade-offs between increased packet size and sub-millisecond latency requirements.By proposing a phased migration framework using Hybrid Cryptographic Wrappers, this research provides a roadmap for maintaining regulatory compliance under NSM-10 while preventing a systemic collapse of digital trust and the associated multitrillion-dollar risk to the US GDP.
Australia's New Payments Platform (NPP) processes 5.2 million real-time transactions per day under a 2,000 ms end-to-end SLA. With cryptographically relevant quantum computers projected for 2030-2035, financial institutions face a post-quantum cryptography (PQC) migration requirement. This paper presents a simulation study of the NIST FIPS 204 and 205 signature standards (ML-DSA, SLH-DSA/SPHINCS+) together with the NIST-selected Falcon algorithm (the forthcoming FIPS 206) in Australian payment infrastructure. Using signing latency measured with liboqs 0.14.0, we simulate 1,000 seasonally mixed days across NPP, RITS and SWIFT routes. All ML-DSA and Falcon variants achieve 100% SLA compliance, with a worst-case NPP p99 overhead of 1.57 ms (0.079% of the SLA budget). We introduce the Crypto Dilution Index (CDI), showing that PQC signing accounts for under 4% of end-to-end latency for every non-SPHINCS+ algorithm, so algorithm choice is not latency-driven. SPHINCS+ is the exception: at NPP volumes its signing time saturates a standard two-unit HSM pool, giving 0% NPP compliance, though it remains viable on the lower-rate RITS and SWIFT routes. A message-format analysis finds that SWIFT imposes no signature-size constraint. SWIFT authentication is applied out-of-band at the SWIFTNet messaging/transport layer, so neither the signature nor the verifying key travels in the Block-4 message text; every NIST PQC signature is size-compatible with SWIFT. Under a conservative harvest-now-decrypt-later scenario with a 2030 quantum arrival, roughly 9.56 billion NPP records generated between 2026 and 2029 would be retroactively exposed. We recommend ML-DSA-65 with ML-KEM-768 as the default across NPP and SWIFT, with Falcon-512 where genuinely in-band, size-constrained carriage is required.
Abstract—The advent of fault-tolerant Cryptanalytically Relevant Quantum Computers (CRQCs) presents an existential threat to modern information security. Shor's polynomial-time quantum algorithm renders widely deployed public-key cryptographic primitives—including RSA, Diffie-Hellman (DH), and Elliptic Curve Cryptography (ECDH/ECDSA)—completely vulnerable to private key derivation. Furthermore, 'Harvest Now, Decrypt Later' (HNDL) adversarial campaigns actively intercept and store encrypted enterprise telemetry today, anticipating future quantum decryption capabilities. In response, the National Institute of Standards and Technology (NIST) finalized its primary Post-Quantum Cryptography (PQC) standards in FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). However, transitioning complex enterprise IT ecosystems to quantum-resistant primitives introduces severe architectural and computational disruptions: public key and signature sizes increase by several orders of magnitude, cryptographic handshake latencies escalate, network packets experience Maximum Transmission Unit (MTU) fragmentation, and legacy Hardware Security Modules (HSMs) lack microarchitectural support for lattice-based polynomial arithmetic. This paper provides an exhaustive, mathematically grounded technical survey and architectural roadmap for enterprise PQC migration. We formalize the Module Learning with Errors (M-LWE) and Module Short Integer Solution (M-SIS) hardness foundations, evaluate hybrid classical/post-quantum cryptographic transition models across standard transport protocols (TLS 1.3, IKEv2/IPsec, SSH), and formulate an enterprise Crypto-Agility Maturity Model. Furthermore, we construct an empirical enterprise testbed measuring throughput, connection establishment latency, memory footprints, and packet fragmentation across legacy and quantum-resistant suites. Our results show that while ML-KEM-768 achieves microsecond-level encapsulation, its 1,088-byte ciphertext expands TLS ClientHello payloads into multiple TCP segments under constrained networks. Finally, we establish open research directions in post-quantum identity federations, stateful hash signature tracking, and hardware-accelerated polynomial arithmetic. Index Terms—Post-Quantum Cryptography (PQC), FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), Crypto-Agility, TLS 1.3, Lattice-Based Cryptography, Harvest Now Decrypt Later, Hardware Security Modules (HSM), Enterprise Migration.
Quantum computing threatens the security foundations of global financial systems, exposing long-lived data and signed digital assets to “harvest-now, decrypt-later” attacks. While the timeline for cryptographically relevant quantum computers remains uncertain, regulatory signals from the USA, UK, EU, Canada, and Australia converge: financial institutions and payment infrastructures must begin migrating to post-quantum cryptography (PQC) now to preserve confidentiality, integrity, and systemic stability. This paper maps emerging standards and roadmaps, contrasting binding requirements like the EU’s DORA crypto-agility provisions with non-binding guidance from NIST, ENISA, and ETSI. Despite a shared intent to secure high-risk use cases by 2030–2031 and complete migration by 2035, divergences in enforcement and milestones create uncertainty for cross-border banks and financial market infrastructures. In parallel, technical adoption is advancing: major browsers, cryptographic libraries (OpenSSL/BoringSSL), and CDNs (e.g., AWS CloudFront) have deployed hybrid PQC key exchange in TLS 1.3, proving confidentiality defenses are viable at internet scale. The paper synthesizes historical transition lessons, sector-specific regulatory drivers, and operational constraints in payment infrastructures to derive a new, principle-based migration: crypto-agility, risk-prioritized scoping, hybrid deployment, vendor and supply-chain alignment, independent testing, and proactive supervisory engagement. Acting now reduces long-tail exposure and ensures readiness for imminent compliance and interoperability deadlines.
The prospect of cryptographically relevant quantum computers threatens public-key primitives underpinning modern digital infrastructure, including RSA, Diffie-Hellman, and elliptic-curve cryptography. Post-quantum cryptography (PQC) responds with algorithms believed to be hard for both classical and quantum adversaries. In August 2024, the U.S. National Institute of Standards and Technology (NIST) finalised the first three PQC standards: FIPS 203 (ML-KEM, based on Kyber), FIPS 204 (ML-DSA, based on Dilithium), and FIPS 205 (SLH-DSA, based on SPHINCS+). This paper surveys the algorithmic families behind these standards, the harvest-now-decrypt-later threat model, hybrid migration strategies, performance trade-offs, and the engineering challenges of transitioning the global cryptographic stack. We examine deployment progress in TLS, SSH, X.509, and constrained devices, and outline open research questions on side-channel security, falcon-style signatures, and the long-term replacement schedule for classical asymmetric cryptography.