Quantum computing may still be years away from breaking modern encryption, but the race to prepare for that moment has already begun. With the publication of NIST's roadmap for transitioning to Post-Quantum Cryptography (PQC), organisations now have clear guidance on how and when they should begin replacing today's quantum-vulnerable cryptographic systems. The challenge is significant: cryptography is embedded across cloud environments, applications, identities, networks, certificates and critical infrastructure. Waiting until quantum computers arrive will be far too late.

For security leaders, the question is no longer whether post-quantum cryptography matters. The question is whether your organisation will be prepared before current encryption standards become obsolete.

What is Post-Quantum Cryptography?

Post-Quantum Cryptography (PQC) refers to cryptographic algorithms designed to resist attacks from both classical and future quantum computers.

Today's public-key cryptography underpins virtually every aspect of digital trust. Technologies including:

• RSA
• Elliptic Curve Cryptography (ECC)
• ECDSA
• EdDSA
• Diffie-Hellman key exchange
• Public Key Infrastructure (PKI)

are used to secure web traffic, VPNs, email communications, software updates, digital certificates, cloud services and identity systems.

While these algorithms remain secure against traditional computing attacks, sufficiently powerful quantum computers could eventually break many of them, fundamentally changing the cybersecurity landscape.

Why Post-Quantum Cryptography matters today

Many organisations assume they can wait until practical quantum computers become available before taking action. However, one of the biggest risks already exists today.

The "Harvest Now, Decrypt Later" Threat

Attackers are increasingly believed to be collecting encrypted data now with the intention of decrypting it in the future once quantum computing capabilities mature.

This means sensitive information transmitted today could remain at risk years from now if it has long-term value, including:

• Customer and employee data
• Intellectual property
• Product designs and research
• Financial records
• Government information
• Healthcare and clinical records
• Critical infrastructure data
• Mergers and acquisitions documentation

For organisations handling information that must remain confidential beyond 2030, quantum risk is already a boardroom issue.

NIST's Post-Quantum Cryptography Transition Roadmap

To help organisations prepare, the National Institute of Standards and Technology (NIST) has established a transition strategy for migrating away from quantum-vulnerable cryptography.

Key milestones include:

2030

• Adoption of PQC algorithms for key establishment in critical systems

2031

• Adoption of PQC digital signature capabilities in critical systems

Post-2030

• Quantum-vulnerable public-key cryptography begins to be deprecated

Post-2035

• Quantum-vulnerable cryptography becomes disallowed

2035

• Target completion date for federal migration to post-quantum cryptography

While these deadlines currently focus on US federal systems, they are expected to influence global cybersecurity frameworks, industry standards, procurement requirements and regulatory expectations.

NIST-approved Quantum-resistant standards

NIST has already selected several algorithms to form the foundation of the next generation of secure cryptography.

ML-KEM (FIPS 203)

Used for key establishment and encryption.

ML-DSA (FIPS 204)

Used for digital signatures.

SLH-DSA (FIPS 205)

Alternative digital signature algorithm.

HQC

An additional key-establishment algorithm currently progressing through standardisation.

These standards will ultimately become the new building blocks for digital trust across governments and enterprises worldwide.

Why PQC is more than a security project

Many organisations underestimate the scale of the transition.

Post-Quantum Cryptography is not simply a software upgrade. It is a large-scale transformation programme that impacts:

• Identity and access management platforms
• PKI infrastructures
• Certificate services
• Zero Trust architectures
• Cloud environments
• VPN technologies
• Applications and APIs
• Software development pipelines
• Hardware Security Modules (HSMs)
• Operational technology (OT) environments

The complexity is comparable to large cloud migration projects or enterprise identity modernisation initiatives.

The business risks of delaying PQC adoption

1. Long-Term Data Exposure

Organisations may already be exposing sensitive data to future decryption risks through existing communications and storage practices.

The value of stolen information often extends well beyond the lifespan of current encryption technologies.

2. Technology Obsolescence

Legacy security infrastructure built around RSA and ECC may require significant redesign to support quantum-safe algorithms.

The longer organisations wait, the greater the risk of expensive, rushed upgrades.

3. Vendor Readiness Challenges

Technology providers will not all move at the same pace.

Security leaders should begin evaluating the PQC readiness of:

• Cloud service providers
• Identity vendors
• Security technology providers
• Network infrastructure manufacturers
• Managed security service providers
• Software vendors

Organisations that fail to assess vendor roadmaps may face compatibility challenges later in the transition.

How organisations should prepare for Post-Quantum Cryptography

1. Build a Cryptographic Inventory

The first step is understanding where cryptography is currently used.

Identify quantum-vulnerable algorithms across:

• Applications
• Websites
• APIs
• VPNs
• Cloud platforms
• Identity services
• Endpoints
• Network infrastructure

You cannot protect what you cannot see.

2. Develop a PQC Migration Strategy

Post-quantum readiness should be integrated into:

• Digital transformation programmes
• Cloud migration initiatives
• Identity modernisation projects
• Infrastructure refresh cycles

Planning early allows migration costs to be spread across existing investments rather than treated as a future emergency.

3. Assess Supplier and Vendor Readiness

Organisations should begin engaging key technology partners to understand:

• PQC support timelines
• Product roadmaps
• Upgrade requirements
• Compatibility considerations

Vendor readiness should become a standard component of cybersecurity governance and supplier assurance processes.

4. Prioritise PKI and Identity Systems

Identity and trust infrastructure will sit at the heart of the quantum transition.

Certificate services, authentication platforms and PKI environments are likely to require extensive planning and redesign.

5. Adopt Cryptographic Agility

One of the most important lessons from NIST's guidance is the need for cryptographic agility.

Future architectures should enable organisations to replace cryptographic algorithms without extensive redevelopment efforts.

Building agility now will make future transitions significantly less disruptive.

6. Include PQC in Security Governance

Post-quantum readiness should be embedded into:

• Cybersecurity strategy
• Enterprise architecture reviews
• Third-party risk management
• Procurement requirements
• Compliance planning
• Board-level risk discussions

The organisations that succeed will treat PQC as a strategic risk management initiative rather than a purely technical challenge.

The Bottom Line

The transition to Post-Quantum Cryptography is no longer a theoretical discussion reserved for research laboratories and academia. It is becoming a practical cybersecurity and business challenge that every organisation will eventually face.

Security leaders who start preparing now can align PQC adoption with existing transformation programmes, reduce future costs and protect sensitive data from emerging quantum threats. Those who delay may find themselves facing compressed timelines, increased complexity and growing regulatory pressure.

Quantum computers may not yet be breaking encryption, but the transition to quantum-safe security has already begun. The organisations that act early will be best positioned to protect their data, maintain compliance and build cyber resilience for the next decade and beyond.

FAQs

What is Post-Quantum Cryptography?

Post-Quantum Cryptography (PQC) is a new generation of cryptographic algorithms designed to remain secure against attacks from future quantum computers.

Is quantum computing a threat today?

Not directly. However, attackers can collect encrypted data today and potentially decrypt it in the future using quantum computers, creating immediate risk for information that must remain confidential for many years.

Which cryptographic algorithms are at risk from quantum attacks?

RSA, ECC, ECDSA, EdDSA and Diffie-Hellman are among the most commonly used public-key cryptographic systems expected to be vulnerable to sufficiently advanced quantum computers.

When should organisations start preparing for PQC?

Now. Most organisations have complex environments containing cryptography in thousands of locations. Migration efforts are expected to take many years.

What does NIST recommend?

NIST recommends organisations begin discovering cryptographic assets, planning migration strategies, implementing cryptographic agility and preparing for the adoption of standards such as ML-KEM, ML-DSA and SLH-DSA.