Skip to content
FrankX.AI
Research Hub/Post-Quantum Cryptography (PQC) & NIST Standards

Post-Quantum Cryptography (PQC) & NIST Standards

Lattice-based cryptography, ML-KEM (Kyber), ML-DSA (Dilithium), SLH-DSA, and enterprise migration roadmaps

TL;DR

When fault-tolerant quantum computers reach scale, Shor's algorithm will completely break all current public-key cryptography (RSA, ECC, Diffie-Hellman). The National Institute of Standards and Technology (NIST) has finalized the official Post-Quantum Cryptography (PQC) standards—primarily based on hard mathematical lattice problems (ML-KEM and ML-DSA)—mandating urgent global enterprise migration.

Updated 2026-08-186 source references4 claims indexed

Research briefs like this, when the evidence is ready. Source links, limitations, and open questions.

Subscribe

FIPS 203/204/205

Official NIST Post-Quantum Cryptographic standards finalized in 2024

NIST Computer Security Division

Harvest Now

"Harvest Now, Decrypt Later" threat active across state-sponsored actors

NSA / CISA Cybersecurity Advisory

Lattice-Based

Module Learning with Errors (MLWE) mathematical foundation

IEEE Transactions on Information Theory

2026–2030

Mandatory migration deadline for federal and financial infrastructures

White House National Security Memo NSM-10
01

The Quantum Threat: Shor's Algorithm vs RSA/ECC

Classical public-key encryption relies on the mathematical difficulty of prime factorization (RSA) and discrete logarithms over elliptic curves (ECC). Peter Shor proved in 1994 that a fault-tolerant quantum computer solves both problems in polynomial time (O((log N)³)) using the Quantum Fourier Transform.

Total Key Breakage

Shor

A quantum computer with ~4,000 logical qubits can break RSA-2048 and ECC-256 in hours.

Grover's Algorithm Impact

Grover

Grover's search algorithm provides a quadratic speedup against symmetric keys (AES), requiring doubling key sizes (AES-128 → AES-256).

"Harvest Now, Decrypt Later" (HNDL)

HNDL

Adversaries intercept and store encrypted government and corporate data today, planning to decrypt it once quantum supercomputers arrive.

02

The NIST PQC Standards: ML-KEM, ML-DSA & SLH-DSA

NIST conducted an 8-year global competition evaluating hundreds of quantum-resistant candidates, finalizing three core mathematical standards.

ML-KEM / FIPS 203 (CRYSTALS-Kyber)

FIPS203

Module-Lattice Key Encapsulation Mechanism used to securely establish shared secret encryption keys across networks.

ML-DSA / FIPS 204 (CRYSTALS-Dilithium)

FIPS204

Module-Lattice Digital Signature Algorithm used for authenticating software updates, TLS certificates, and identity.

SLH-DSA / FIPS 205 (SPHINCS+)

FIPS205

Stateless hash-based digital signature algorithm providing a backup mathematical defense if lattice math ever faces algorithmic breakthroughs.

03

Enterprise Cryptographic Agility & Migration Roadmap

Migrating legacy enterprise systems to PQC is a massive undertaking: post-quantum keys and signatures are 5x–20x larger than RSA/ECC, causing network packet fragmentation and TLS handshake latency.

Hybrid Classical-Quantum TLS

Hybrid

Combines X25519 and ML-KEM in a dual handshake: connections remain secure even if either algorithm is compromised.

Cryptographic Inventory & Discovery

Inventory

Scans enterprise codebases, certificates, hardware security modules (HSMs), and VPNs to locate legacy RSA/ECC dependencies.

Hardware Security Module (HSM) Upgrades

HSM

Updates cryptographic coprocessors and firmware to support larger post-quantum key sizes.

Key Findings

1

NIST has officially finalized FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) as the global standards for post-quantum encryption.

2

"Harvest Now, Decrypt Later" attacks make PQC migration urgent today for any enterprise data that must remain confidential for 10+ years.

3

Hybrid TLS handshakes (X25519 + ML-KEM) are already enabled by default in major browsers (Chrome, Edge) and cloud networks (Cloudflare, AWS).

4

Post-quantum keys are significantly larger than RSA/ECC (e.g. ML-KEM-768 public key is 1,184 bytes vs ECC 32 bytes), requiring network MTU buffer tuning.

5

Symmetric encryption (AES-256) and secure hashing (SHA-256/384) remain mathematically safe against quantum attacks without architectural replacement.

Research Transparency

Limitations

  • Larger post-quantum key sizes can cause packet fragmentation on legacy network switches and slow down TLS handshakes.
  • Embedded IoT devices with limited memory and microcontrollers struggle with the RAM footprint of lattice operations.

What We Don't Know

  • ?Whether novel classical mathematical algorithms will discover polynomial-time shortcuts for high-dimensional lattice problems.
  • ?The exact year when a nation-state or private lab will achieve the ~4,000 logical qubit threshold required to run Shor's algorithm at scale.
Evidence Grade:Grade A(Backed by NIST FIPS 203/204/205 official standards, NSA Cybersecurity Advisories, and IEEE Transactions on Information Forensics and Security.)

Frequently Asked Questions

PQC refers to new cryptographic algorithms designed to run on standard classical computers that are mathematically impossible for even a fault-tolerant quantum computer to crack.

From research to practice

Learn these tools hands-on

The research maps the landscape. These portals curate the videos, docs, and experts to actually build with the platforms it covers.