Quantum information & cryptography

post-quantum cryptography (PQC)

Post-quantum cryptography is the down-to-earth answer to a future worry. A capable quantum computer running Shor's algorithm could break the public-key crypto that protects most of today's internet (RSA and elliptic-curve), because Shor turns code-breaking into a period-finding problem that quantum hardware handles efficiently. PQC's response is not to fight quantum with quantum. Instead it swaps in new classical algorithms — ordinary math, ordinary code — built on problems that neither classical nor quantum computers are known to crack quickly, such as finding short vectors in high-dimensional lattices.

The key thing to hold onto: PQC runs on the laptops, phones, and servers you already own. There is no quantum machine involved on your end. You are just replacing the locks (the algorithms that exchange keys and make signatures) with sturdier ones, while the rest of your secure connection works as before. After years of public scrutiny, standards bodies have selected a first set of these schemes, and software is steadily migrating to them.

PQC is distinct from QKD: QKD uses physics to exchange a key over special hardware, while PQC is plain software you can deploy today — which is why the urgency is real, since data captured now could be stored and decrypted later once a large quantum computer exists.

Also called
PQCquantum-resistant cryptographyquantum-safe cryptography抗量子密码量子安全密码