Post-Quantum Cryptography
Cryptographic algorithms designed to resist attack by a sufficiently capable quantum computer. Shor's algorithm would break the mathematics underlying RSA, Diffie-Hellman and elliptic-curve cryptography, while Grover's algorithm weakens symmetric primitives only quadratically, so AES-256 and SHA-384 remain adequate. NIST has standardised replacements including ML-KEM (Kyber) for key encapsulation and ML-DSA (Dilithium) and SLH-DSA (SPHINCS+) for signatures. Post-quantum migration now appears in updated CISSP, CCSP and Security+ objectives.
Why It Matters
In practice the asymmetry between the two quantum algorithms is the key insight: public-key cryptography needs replacing, symmetric cryptography mostly needs longer keys. The urgency for confidentiality is driven by harvest-now-decrypt-later -- an adversary recording encrypted traffic today can decrypt it once a capable machine exists -- so any data with a secrecy lifetime measured in decades is already exposed, which is why migration is starting before the threat is realised. Signatures are less urgent, since forging a signature after the fact is usually less valuable than reading old traffic, though long-lived roots and firmware signing keys are exceptions. Sound preparation is unglamorous: inventory where public-key cryptography is used and what its data lifetime is, prefer crypto-agile designs where an algorithm can be swapped without redesign, and adopt hybrid key exchange that combines a classical and a post-quantum algorithm so a weakness in either is survivable. On exams, expect questions on which primitives are threatened and why AES-256 survives.
Practice this topic
Test your knowledge of Post-Quantum Cryptography concepts with exam-style practice questions.
Related Cryptography terms
Encryption
The process of converting plaintext data into an unreadable format (ciphertext) using a cryptographic algorithm and key, ensuring that only authorized parties can access the original information. Encryption can be symmetric (same key for encryption and decryption, e.g., AES) or asymmetric (public/private key pair, e.g., RSA). Data can be encrypted at rest (stored data), in transit (network communication via TLS), or in use (homomorphic encryption). Encryption is mandated by regulations like GDPR, HIPAA, and PCI DSS for protecting sensitive data. It is a fundamental topic across all cybersecurity certifications.
Hashing
A one-way function that converts input data of any size into a fixed-length string of characters (hash value or digest), used primarily for data integrity verification and password storage. Unlike encryption, hashing is irreversible, you cannot recover the original data from the hash. Common algorithms include SHA-256, SHA-3, and bcrypt (for passwords). Hashing is used in digital signatures, file integrity monitoring, blockchain, and password authentication. Collision resistance (ensuring two different inputs don't produce the same hash) is a critical property tested in CISSP and Security+ cryptography domains.
Public Key Infrastructure (PKI)
A set of roles, policies, hardware, software, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates and public keys. PKI enables secure electronic communication through certificate authorities (CAs) that issue and validate certificates, registration authorities (RAs), and certificate revocation lists (CRLs) or OCSP responders. PKI underpins HTTPS/TLS, email encryption (S/MIME), VPNs, code signing, and digital signatures. Understanding PKI hierarchy (root CA, intermediate CA, end-entity certificates) is essential for CISSP, Security+, and CCSP certifications.
Digital Certificate
An electronic document issued by a Certificate Authority (CA) that binds a public key to an entity's identity, enabling encrypted communication and identity verification. Certificates follow the X.509 standard and contain the subject's name, public key, issuer, validity period, and digital signature. Types include SSL/TLS certificates (for websites), code signing certificates, email certificates (S/MIME), and client certificates. Certificate validation involves checking the chain of trust, expiration date, and revocation status. Digital certificates are a core component of PKI and are tested in CISSP, Security+, and CCSP exams.
AES (Advanced Encryption Standard)
A symmetric block cipher algorithm adopted by the U.S. government as the standard for encrypting electronic data, replacing the older DES standard. AES operates on 128-bit blocks and supports key sizes of 128, 192, or 256 bits, with AES-256 being the strongest. It uses substitution-permutation network rounds (10, 12, or 14 rounds depending on key size) and is considered computationally secure against brute-force attacks. AES is used in TLS/HTTPS, disk encryption (BitLocker, FileVault), VPNs, and Wi-Fi security (WPA2/WPA3). It is the most widely tested symmetric algorithm in CISSP and Security+ exams.
TLS (Transport Layer Security)
A cryptographic protocol designed to provide secure communication over a computer network by encrypting data in transit between two parties (e.g., a web browser and server). TLS replaced its predecessor SSL and operates through a handshake process that negotiates cipher suites, authenticates the server (and optionally the client) via certificates, and establishes session keys. TLS 1.3 (the latest version) improved performance by reducing handshake round trips and removing insecure cipher suites. HTTPS is simply HTTP over TLS. Understanding TLS versions, cipher suites, and certificate validation is essential for Security+, CISSP, and web security certifications.