You don’t need quantum hardware for post-quantum security

This post clarifies that Post-Quantum Cryptography (PQC) is the necessary and sufficient solution for protecting against quantum adversaries, emphasizing its deployability on existing hardware without specialized quantum technology. It argues against the necessity of Quantum Key Distribution (QKD) and Quantum Random Number Generation (QRNG) for this purpose, citing QKD's lack of Internet-scale applicability and the fact that PQC itself provides sufficient randomness and security. The post highlights that PQC algorithms are based on mathematical problems hard for both classical and quantum computers and are being standardized by NIST. It contrasts PQC with quantum technologies, stating that investments in quantum tech should be for their own sake (e.g., scientific advancement) rather than for quantum-era security.
More from the Random Number Generation for Security trail
- Support for modern cryptographic algorithms in Workers
- Using AI to chart a course for our post-quantum migration
- Post-quantum authentication to origins is now supported
- Why we cannot wait for better post-quantum signature algorithms
- The White House's post-quantum executive order is an important milestone. It’s time to get to work