GRIDERA

Post-Quantum Cryptography Explained

Understand the quantum threat, NIST standards, and how to migrate your cryptographic infrastructure to quantum-safe algorithms.

Why Quantum Threatens Current Cryptography

Today's encryption relies on mathematical problems that classical computers cannot solve in a reasonable time. Quantum computers, using quantum mechanical properties, can solve these problems exponentially faster.

The Quantum Threat

A sufficiently powerful quantum computer could break RSA, ECC, and other current encryption methods using Shor's algorithm. This affects TLS, digital signatures, key exchange, and virtually all modern cryptographic systems.

At Risk

  • RSA (all key sizes)
  • Elliptic Curve Cryptography (ECC)
  • Diffie-Hellman key exchange
  • DSA digital signatures

Quantum-Safe

  • ML-DSA (FIPS 204)
  • ML-KEM (FIPS 203)
  • SLH-DSA (FIPS 205)
  • AES-256 (with increased key sizes)

“Harvest Now, Decrypt Later”

Even without quantum computers today, adversaries may be collecting encrypted data now to decrypt later when quantum computers become available. This makes migration urgent for sensitive, long-lived data.

NIST Post-Quantum Cryptography Standards

The U.S. National Institute of Standards and Technology (NIST) has finalized the first post-quantum cryptography standards after an eight-year global competition.

FIPS 203

ML-KEM

Module-Lattice-Based Key-Encapsulation Mechanism. Based on the CRYSTALS-Kyber algorithm. Used for key establishment and key exchange.

Use cases: TLS handshakes, encrypted communication setup, key wrapping

FIPS 204

ML-DSA

Module-Lattice-Based Digital Signature Algorithm. Based on CRYSTALS-Dilithium. Used for digital signatures.

Use cases: Document signing, code signing, authentication, certificates

FIPS 205

SLH-DSA

Stateless Hash-Based Digital Signature Algorithm. Based on SPHINCS+. Alternative signature scheme using hash functions.

Use cases: Backup signatures, high-security applications, long-term signatures

ML-DSA vs ML-KEM Explained

Understanding when to use each algorithm is crucial for implementing quantum-safe cryptography correctly.

ML-DSA (Signatures)

Digital signatures prove authenticity and integrity. Use ML-DSA when you need to:

  • Sign documents and contracts
  • Authenticate software and updates
  • Create audit trails
  • Issue certificates
  • Sign API requests

ML-KEM (Key Exchange)

Key encapsulation securely shares encryption keys. Use ML-KEM when you need to:

  • Establish TLS connections
  • Exchange symmetric keys
  • Encrypt data at rest
  • Set up secure channels
  • Wrap/unwrap keys
PropertyML-DSAML-KEM
PurposeDigital signaturesKey encapsulation
Based onModule latticesModule lattices
NIST StandardFIPS 204FIPS 203
Original AlgorithmCRYSTALS-DilithiumCRYSTALS-Kyber
Security Levels2, 3, 51, 3, 5
Key Size (L3)~2.5 KB~1.5 KB

Security Levels Guide

NIST defines five security levels based on the difficulty of breaking the encryption. Higher levels provide more security but with larger key sizes and slower operations.

L1
Level 1(AES-128 equivalent)

General purpose applications

ML-KEM-512
L2
Level 2(SHA-256 collision resistance)

Standard business applications

ML-DSA-44
L3
Level 3(AES-192 equivalent)

Sensitive data, financial services

ML-KEM-768ML-DSA-65
L5
Level 5(AES-256 equivalent)

Government, defense, long-term secrets

ML-KEM-1024ML-DSA-87

Migration Strategies

Migrating to post-quantum cryptography requires careful planning. GRIDERA supports multiple migration strategies based on your risk tolerance and timeline.

1. Hybrid Approach (Recommended)

Combine classical and post-quantum algorithms for maximum security. If either algorithm is broken, the other still provides protection.

TLS: ECDHE + ML-KEM → shared_secret = classical_secret || pqc_secret

2. Pure PQC Migration

Replace classical algorithms entirely with post-quantum alternatives. Simpler but requires confidence in PQC algorithm security.

RSA signatures → ML-DSA signatures

3. Crypto Agility

Design systems to easily switch algorithms without major code changes. Essential for long-term flexibility as standards evolve.

Algorithm negotiation → automatic selection based on policy

GRIDERA Migration Wizard

Our migration wizard guides you through:

  • Cryptographic inventory discovery
  • Risk assessment and prioritization
  • Algorithm selection guidance
  • Key rotation automation
  • Compatibility testing
  • Progress monitoring

Ready to migrate to quantum-safe cryptography?

Start with a security assessment to understand your current cryptographic posture.

Start Security Assessment