The simultaneous maturation of quantum computing and artificial intelligence represents a defining inflection point for the security of digital civilization. This chapter examines the convergence of these two transformative forces through a bidirectional analytical lens: how artificial intelligence can accelerate and improve the organizational transition to post-quantum cryptography and how post-quantum cryptographic standards must be applied to secure AI infrastructure itself. Building on the NIST finalization of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) in August 2024 and the subsequent selection of HQC in March 2025, the chapter develops a practitioner-oriented treatment of the algorithmic foundations, performance characteristics, and deployment realities of each standardized scheme. A dedicated section develops the “Harvest Now, Decrypt Later” (HNDL) threat as a present-tense security emergency rather than a future concern and introduces a novel detection architecture that integrates HNDL behavioral indicators into the streaming telemetry pipeline of Chapter 2 and the AI-SOC framework of Chapter 4 . The chapter examines AI-assisted cryptographic discovery, inventory automation, side-channel vulnerability detection, and migration workflow orchestration as tools for managing the organizational complexity of the PQC transition. It addresses the reciprocal challenge of applying PQC to AI infrastructure itself – securing large language model inference pipelines, federated learning gradient exchanges, agentic communication channels, and model provenance attestation against quantum-capable adversaries. A practical deployment section documents the installation and operation of the Open Quantum Safe liboqs library and OQS-OpenSSL provider on Ubuntu 24.04 LTS, with original step-by-step guidance derived from direct implementation experience. The chapter closes by synthesizing the governance requirements, policy timelines, and organizational frameworks that responsible PQC transition demands – and by tying together the 11-chapter arc of this book into a single coherent argument about what secure looks like in the age of autonomous defense.
The simultaneous maturation of quantum computing and artificial intelligence represents a defining inflection point for the security of digital civilization. This chapter examines the convergence of these two transformative forces through a bidirectional analytical lens: how artificial intelligence can accelerate and improve the organizational transition to post-quantum cryptography and how post-quantum cryptographic standards must be applied to secure AI infrastructure itself. Building on the NIST finalization of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) in August 2024 and the subsequent selection of HQC in March 2025, the chapter develops a practitioner-oriented treatment of the algorithmic foundations, performance characteristics, and deployment realities of each standardized scheme. A dedicated section develops the “Harvest Now, Decrypt Later” (HNDL) threat as a present-tense security emergency rather than a future concern and introduces a novel detection architecture that integrates HNDL behavioral indicators into the streaming telemetry pipeline of Chapter 2 and the AI-SOC framework of Chapter 4 . The chapter examines AI-assisted cryptographic discovery, inventory automation, side-channel vulnerability detection, and migration workflow orchestration as tools for managing the organizational complexity of the PQC transition. It addresses the reciprocal challenge of applying PQC to AI infrastructure itself – securing large language model inference pipelines, federated learning gradient exchanges, agentic communication channels, and model provenance attestation against quantum-capable adversaries. A practical deployment section documents the installation and operation of the Open Quantum Safe liboqs library and OQS-OpenSSL provider on Ubuntu 24.04 LTS, with original step-by-step guidance derived from direct implementation experience. The chapter closes by synthesizing the governance requirements, policy timelines, and organizational frameworks that responsible PQC transition demands – and by tying together the 11-chapter arc of this book into a single coherent argument about what secure looks like in the age of autonomous defense.
This book explores the intersection of artificial intelligence (AI) and quantum computing, focusing on the urgent need to secure machine learning systems in the face of emerging quantum threats. As quantum computers advance, they expose vulnerabilities in classical cryptographic methods, potentially undermining data integrity, privacy, and trust in AI-driven applications. To address these challenges, this study introduces the concept of post-quantum AI—a framework for integrating quantum-resistant cryptographic algorithms, Anomaly detection mechanisms, and Resilient machine learning architectures. This book makes three core contributions: it motivates a quantum-era threat model for machine learning (ii) it maps a migration path to standardised post-quantum cryptography Crypto-agile architectures (iii) it presents a defence-in-depth blueprint across the data → training → inference lifecycle that integrates privacy-preserving learning Governance. This work explicitly highlights key contributions, including proposed frameworks, algorithms, and case studies. Future research directions are also outlined to guide continued exploration in this emergent field. The final candidate algorithms from the NIST PQC standardisation process (NIST, 2022–2023) further strengthen this discussion. Key themes include the foundations of quantum mechanics relevant to computation, the fundamental differences between classical and quantum computing, and the transformative potential of quantum algorithms for optimisation, pattern recognition, and predictive analytics. The book highlights case studies spanning drug discovery, finance, mobile networks, and supply chain optimisation, illustrating how quantum-enhanced AI can revolutionise industry while simultaneously raising complex security and ethical concerns. A central focus is the development and deployment of post-quantum cryptography (PQC)), such as lattice-based and hash-based algorithms, to safeguard AI models against adversarial and quantum-accelerated attacks. The discussion extends to adversarial machine learning, explainable AI (XAI), and hybrid classical–quantum systems as strategies for strengthening resilience. The ethical, legal, and regulatory dimensions of post-quantum AI are also examined, emphasising fairness, transparency, accountability, and international cooperation. By combining technical innovations with responsible governance, the book advocates for building trustworthy AI systems that remain robust in the quantum era. Future work includes post-quantum cryptography (PQC) performance benchmarking in ML pipelines Patterns for crypto-agile key management, Assurance methods for privacy-preserving Federated learning as standards, and Implementations that are mature.
Scholarship and enterprise practice have historically treated quantum computing and artificial intelligence (AI) as distinct domains of cybersecurity risk, each with its own timeline, mechanisms, and mitigation literature. This article argues that the separation is no longer analytically or operationally tenable. As of 2026, the two technologies have entered a phase of mutual acceleration in which AI compresses the timeline toward a cryptographically relevant quantum computer (CRQC) while serving as the principal mechanism through which organizations can detect, inventory, and defend against quantum-era threats. The article develops this thesis across five analytical movements: the accelerated offensive timeline, in which machine-learning techniques contribute to advances in error correction and algorithm optimization that have driven estimated qubit requirements for breaking RSA-2048 from roughly twenty million toward one million, a reduction attributable to converging algorithmic, hardware, and AI-assisted advances rather than to any single cause; the harvest-now-decrypt-later (HNDL) threat, which converts a prospective future risk into a present data-exposure problem made more urgent by the state-directed investment postures of well-resourced adversaries; the bidirectional defensive opportunity, in which quantum machine learning (QML), a research-stage methodology whose results are exploratory and conditional on task, dataset, and evaluation environment, and AI-driven cryptographic discovery offer a realistic path to enterprise-scale post-quantum migration; the 2026 regulatory inflection, in which finalized NIST standards and binding compliance deadlines have transformed migration from a research question into an execution problem; and the global investment and geopolitical competition dimension, in which divergent national quantum programs, military-civil fusion architectures, indigenous cryptographic standards, and supply chain concentration risks expand the scope of the migration challenge beyond the compliance-deadline framing that domestic regulatory guidance alone provides. Drawing on recent empirical results in QML-based intrusion detection, documented advances in AI-assisted quantum error correction, the current standards landscape, and comparative analysis of U.S., Chinese, and European quantum investment postures, the article concludes with a five-part strategic framework for security leaders and identifies directions for further research. The central claim is that the defining cybersecurity challenge of the coming decade resides in the interaction of quantum computing and AI, and in the geopolitical competition shaping both, rather than in either technology considered in isolation.
Purpose: The purpose of this paper is to examine the emerging threat that large-scale quantum computing poses to classical public-key cryptographic systems, particularly RSA and Elliptic Curve Cryptography (ECC), which form the backbone of contemporary digital security infrastructures. In response to this threat, the study aims to analyze post-quantum cryptography (PQC) as a viable long-term solution capable of resisting both classical and quantum adversaries. The paper further seeks to assess the urgency of PQC adoption in light of the “harvest now, decrypt later” threat model and to evaluate the practical readiness of quantum-safe cryptographic algorithms currently under consideration by the National Institute of Standards and Technology (NIST). Materials and Methods: This study employs a qualitative and analytical research methodology grounded in an extensive review of authoritative sources, including NIST’s post-quantum cryptography standardization documents, recent academic literature, industry white papers, and policy reports from organizations such as RAND Corporation and Cloudflare. The analysis systematically surveys major families of post-quantum cryptographic algorithms namely lattice-based, code-based, and hash-based schemes and evaluates them based on security assumptions, computational efficiency, implementation complexity, and standardization maturity. Findings: The analysis indicates that Lattice-based cryptographic schemes demonstrate the highest maturity and practical readiness, evidenced by their selection in NIST’s PQC process. Code- and hash-based methods provide strong security but face key size and performance challenges. The lack of scalable quantum computers does not reduce urgency, as data harvesting persists. Artificial intelligence emerges as a key enabler for accelerating PQC adoption. Unique Contribution to Theory, Practice and Policy: The paper recommends a proactive, phased post-quantum migration using hybrid cryptographic architectures. Organizations should conduct inventories, benchmarking, and pilot deployments aligned with NIST standards. AI-driven tools are advised to improve key management and reduce complexity. Continued interdisciplinary research and policy support are encouraged to ensure a secure, scalable transition to quantum-resistant security systems.
Abstract—The advent of fault-tolerant Cryptanalytically Relevant Quantum Computers (CRQCs) presents an existential threat to modern information security. Shor's polynomial-time quantum algorithm renders widely deployed public-key cryptographic primitives—including RSA, Diffie-Hellman (DH), and Elliptic Curve Cryptography (ECDH/ECDSA)—completely vulnerable to private key derivation. Furthermore, 'Harvest Now, Decrypt Later' (HNDL) adversarial campaigns actively intercept and store encrypted enterprise telemetry today, anticipating future quantum decryption capabilities. In response, the National Institute of Standards and Technology (NIST) finalized its primary Post-Quantum Cryptography (PQC) standards in FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). However, transitioning complex enterprise IT ecosystems to quantum-resistant primitives introduces severe architectural and computational disruptions: public key and signature sizes increase by several orders of magnitude, cryptographic handshake latencies escalate, network packets experience Maximum Transmission Unit (MTU) fragmentation, and legacy Hardware Security Modules (HSMs) lack microarchitectural support for lattice-based polynomial arithmetic. This paper provides an exhaustive, mathematically grounded technical survey and architectural roadmap for enterprise PQC migration. We formalize the Module Learning with Errors (M-LWE) and Module Short Integer Solution (M-SIS) hardness foundations, evaluate hybrid classical/post-quantum cryptographic transition models across standard transport protocols (TLS 1.3, IKEv2/IPsec, SSH), and formulate an enterprise Crypto-Agility Maturity Model. Furthermore, we construct an empirical enterprise testbed measuring throughput, connection establishment latency, memory footprints, and packet fragmentation across legacy and quantum-resistant suites. Our results show that while ML-KEM-768 achieves microsecond-level encapsulation, its 1,088-byte ciphertext expands TLS ClientHello payloads into multiple TCP segments under constrained networks. Finally, we establish open research directions in post-quantum identity federations, stateful hash signature tracking, and hardware-accelerated polynomial arithmetic. Index Terms—Post-Quantum Cryptography (PQC), FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), Crypto-Agility, TLS 1.3, Lattice-Based Cryptography, Harvest Now Decrypt Later, Hardware Security Modules (HSM), Enterprise Migration.
Abstract: This study investigates Quantum-AI number-theoretic frameworks for post-quantum cryptography (PQC) and long-term information security. The paper positions lattice-based, hash-based and code-based cryptographic standards as formal security substrates for a future in which adversaries may combine classical cyber operations, artificial intelligence and quantum computation. The proposed framework treats cryptography not merely as an algorithmic primitive but as a socio-technical assurance layer that links formal number theory, cryptographic agility, AI-assisted verification, hardware deployment and governance-grade migration planning. The analysis is motivated by the harvest-now-decrypt-later threat, the standardisation of ML-KEM, ML-DSA and SLH-DSA, and the selection of HQC as a backup encryption mechanism for resilience against unexpected cryptanalytic progress. The methodological contribution is a Literature-Reasoning (LR) framework that identifies mathematical research strategies through a reasoning agent, converts tentative proofs and design claims into machine-checkable representations through a proof agent, and validates each step to reduce hallucination, informal overclaiming and migration error. The empirical component uses real standards-derived data from NIST PQC publications, including parameter sizes, key/ciphertext footprints and signature footprints, together with a structured migration scorecard for long-term information security. Results show that PQC migration is not a one-dimensional replacement problem: stronger security categories increase payload and storage costs, while governance maturity, software dependency visibility and formal verification capacity determine whether long-term confidentiality can be preserved across finance, telecom, health, industry, government and cloud infrastructure. Keywords: post-quantum cryptography; quantum artificial intelligence; number theory; ML-KEM; ML-DSA; SLH-DSA; HQC; crypto-agility; long-term security; formal verification
The prospect of cryptographically relevant quantum computers threatens public-key primitives underpinning modern digital infrastructure, including RSA, Diffie-Hellman, and elliptic-curve cryptography. Post-quantum cryptography (PQC) responds with algorithms believed to be hard for both classical and quantum adversaries. In August 2024, the U.S. National Institute of Standards and Technology (NIST) finalised the first three PQC standards: FIPS 203 (ML-KEM, based on Kyber), FIPS 204 (ML-DSA, based on Dilithium), and FIPS 205 (SLH-DSA, based on SPHINCS+). This paper surveys the algorithmic families behind these standards, the harvest-now-decrypt-later threat model, hybrid migration strategies, performance trade-offs, and the engineering challenges of transitioning the global cryptographic stack. We examine deployment progress in TLS, SSH, X.509, and constrained devices, and outline open research questions on side-channel security, falcon-style signatures, and the long-term replacement schedule for classical asymmetric cryptography.