Quantum computing may still be years away from breaking modern encryption, but the race to prepare for that moment has already begun. With the publication of NIST's roadmap for transitioning to Post-Quantum Cryptography (PQC), organisations now have clear guidance on how and when they should begin replacing today's quantum-vulnerable cryptographic systems. The challenge is significant: cryptography is embedded across cloud environments, applications, identities, networks, certificates and critical infrastructure. Waiting until quantum computers arrive will be far too late.
For security leaders, the question is no longer whether post-quantum cryptography matters. The question is whether your organisation will be prepared before current encryption standards become obsolete.
Post-Quantum Cryptography (PQC) refers to cryptographic algorithms designed to resist attacks from both classical and future quantum computers.
Today's public-key cryptography underpins virtually every aspect of digital trust. Technologies including:
are used to secure web traffic, VPNs, email communications, software updates, digital certificates, cloud services and identity systems.
While these algorithms remain secure against traditional computing attacks, sufficiently powerful quantum computers could eventually break many of them, fundamentally changing the cybersecurity landscape.
Many organisations assume they can wait until practical quantum computers become available before taking action. However, one of the biggest risks already exists today.
Attackers are increasingly believed to be collecting encrypted data now with the intention of decrypting it in the future once quantum computing capabilities mature.
This means sensitive information transmitted today could remain at risk years from now if it has long-term value, including:
For organisations handling information that must remain confidential beyond 2030, quantum risk is already a boardroom issue.
To help organisations prepare, the National Institute of Standards and Technology (NIST) has established a transition strategy for migrating away from quantum-vulnerable cryptography.
Key milestones include:
2030
2031
Post-2030
Post-2035
2035
While these deadlines currently focus on US federal systems, they are expected to influence global cybersecurity frameworks, industry standards, procurement requirements and regulatory expectations.
NIST has already selected several algorithms to form the foundation of the next generation of secure cryptography.
ML-KEM (FIPS 203)
Used for key establishment and encryption.
ML-DSA (FIPS 204)
Used for digital signatures.
SLH-DSA (FIPS 205)
Alternative digital signature algorithm.
HQC
An additional key-establishment algorithm currently progressing through standardisation.
These standards will ultimately become the new building blocks for digital trust across governments and enterprises worldwide.
Many organisations underestimate the scale of the transition.
Post-Quantum Cryptography is not simply a software upgrade. It is a large-scale transformation programme that impacts:
The complexity is comparable to large cloud migration projects or enterprise identity modernisation initiatives.
Organisations may already be exposing sensitive data to future decryption risks through existing communications and storage practices.
The value of stolen information often extends well beyond the lifespan of current encryption technologies.
Legacy security infrastructure built around RSA and ECC may require significant redesign to support quantum-safe algorithms.
The longer organisations wait, the greater the risk of expensive, rushed upgrades.
Technology providers will not all move at the same pace.
Security leaders should begin evaluating the PQC readiness of:
Organisations that fail to assess vendor roadmaps may face compatibility challenges later in the transition.
The first step is understanding where cryptography is currently used.
Identify quantum-vulnerable algorithms across:
You cannot protect what you cannot see.
Post-quantum readiness should be integrated into:
Planning early allows migration costs to be spread across existing investments rather than treated as a future emergency.
Organisations should begin engaging key technology partners to understand:
Vendor readiness should become a standard component of cybersecurity governance and supplier assurance processes.
Identity and trust infrastructure will sit at the heart of the quantum transition.
Certificate services, authentication platforms and PKI environments are likely to require extensive planning and redesign.
One of the most important lessons from NIST's guidance is the need for cryptographic agility.
Future architectures should enable organisations to replace cryptographic algorithms without extensive redevelopment efforts.
Building agility now will make future transitions significantly less disruptive.
Post-quantum readiness should be embedded into:
The organisations that succeed will treat PQC as a strategic risk management initiative rather than a purely technical challenge.
The transition to Post-Quantum Cryptography is no longer a theoretical discussion reserved for research laboratories and academia. It is becoming a practical cybersecurity and business challenge that every organisation will eventually face.
Security leaders who start preparing now can align PQC adoption with existing transformation programmes, reduce future costs and protect sensitive data from emerging quantum threats. Those who delay may find themselves facing compressed timelines, increased complexity and growing regulatory pressure.
Quantum computers may not yet be breaking encryption, but the transition to quantum-safe security has already begun. The organisations that act early will be best positioned to protect their data, maintain compliance and build cyber resilience for the next decade and beyond.
What is Post-Quantum Cryptography?
Post-Quantum Cryptography (PQC) is a new generation of cryptographic algorithms designed to remain secure against attacks from future quantum computers.
Is quantum computing a threat today?
Not directly. However, attackers can collect encrypted data today and potentially decrypt it in the future using quantum computers, creating immediate risk for information that must remain confidential for many years.
Which cryptographic algorithms are at risk from quantum attacks?
RSA, ECC, ECDSA, EdDSA and Diffie-Hellman are among the most commonly used public-key cryptographic systems expected to be vulnerable to sufficiently advanced quantum computers.
When should organisations start preparing for PQC?
Now. Most organisations have complex environments containing cryptography in thousands of locations. Migration efforts are expected to take many years.
What does NIST recommend?
NIST recommends organisations begin discovering cryptographic assets, planning migration strategies, implementing cryptographic agility and preparing for the adoption of standards such as ML-KEM, ML-DSA and SLH-DSA.