post-quantum cryptography
Much of today's secure Internet — the padlock in your browser, your bank login — rests on math problems that ordinary computers cannot solve in any reasonable time, such as factoring enormous numbers. A future large-scale quantum computer, if one is ever built, could solve some of those exact problems efficiently, which would quietly break much of the public-key cryptography we rely on. Post-quantum cryptography is the response: new encryption and signature algorithms, designed to run on ordinary computers we have today, but built on math problems that even a quantum computer is not known how to crack.
Concretely, post-quantum cryptography replaces the vulnerable public-key algorithms (the ones used to exchange keys and to sign certificates) with new ones based on harder problems — for example, problems involving high-dimensional lattices, error-correcting codes, or hash functions. These are classical algorithms: they are just software and run on the same laptops, phones, and servers as before. After years of public scrutiny, standards bodies have selected and published the first such algorithms, and the long migration has begun — updating protocols like TLS to use these new algorithms so that a connection made today stays secure even against a quantum computer that might exist tomorrow.
Why it matters, and the key distinction: this is the practical, mainstream defense against future quantum computers — software you can deploy by upgrading your systems, not exotic hardware. It is different from quantum key distribution: QKD uses quantum physics and special equipment to share keys, while post-quantum cryptography is ordinary code solving the same problem in a quantum-resistant way, deployable everywhere at once. A real and pressing reason to act now is 'harvest now, decrypt later': an adversary can record your encrypted traffic today and decrypt it years later once a quantum computer arrives — so data that must stay secret for a long time needs post-quantum protection before such machines exist. The honest caveat: these algorithms are newer and less battle-tested than the ones they replace, so they are being rolled out carefully, often alongside the old ones.
Browsers and servers have begun negotiating TLS connections using a post-quantum key exchange alongside the classic one — a 'hybrid' mode. Even if a quantum computer later breaks the classic part, the post-quantum part still protects the session, so a transcript recorded today cannot be decrypted in the future.
Hybrid mode defends against 'harvest now, decrypt later'.
Post-quantum cryptography is software, not quantum hardware — do not confuse it with quantum key distribution. It defends against future quantum computers by changing the underlying math, but the algorithms are relatively new, so they are deployed cautiously and often in hybrid mode beside the proven classical ones.