Mentatcurated
▸ Concept

Post-quantum cryptography

Encryption algorithms designed to stay secure against attacks from quantum computers.

Learn first

In a nutshell

Most public-key cryptography in use today — RSA, elliptic-curve — rests on math problems (factoring large numbers, discrete logarithm) that a sufficiently large quantum computer could solve quickly using Shor's algorithm. Post-quantum cryptography replaces those with problems — lattice-based, hash-based, code-based — believed hard for both classical and quantum machines. NIST finalized its first post-quantum standards in 2024. The hard part is not the math: it is migrating years of deployed infrastructure before cryptographically-relevant quantum hardware arrives.

Where it came from

Year1994
SourcePeter Shor, 'Algorithms for Quantum Computation: Discrete Logarithms and Factoring'
Why it matteredShor's 1994 result motivated the field; 'post-quantum cryptography' as a named discipline coalesced through the 2000s NIST standardization effort.

How this connects

Tap a node to open it