Post-quantum security

Data stolen today can be decrypted once quantum computers arrive. We build products that are safe now and in the quantum era, with hybrid post-quantum cryptography from day one.

Algorithms: ML-KEM, ML-DSA, SLH-DSA, FN-DSA, HQC, X25519, AES-256-GCM.

Why now

Harvest now, decrypt later: traffic recorded today can be broken by a future quantum computer. Anything that must stay secret for years needs post-quantum protection today.

Key exchange

ML-KEM (FIPS 203, Kyber) at 512, 768 and 1024, paired with X25519 so a break in either algorithm is not enough. HQC, NIST’s code-based backup, and Classic McEliece for long-lived keys.

Signatures

ML-DSA (FIPS 204, Dilithium) for tokens and admin actions, SLH-DSA (FIPS 205, SPHINCS+) for roots of trust, FN-DSA (Falcon) where signature size matters, and LMS/XMSS for code signing.

Migration

We inventory your cryptography, make it crypto-agile, and move you to hybrid TLS 1.3 (X25519MLKEM768), post-quantum VPN tunnels and encrypted storage, without downtime.

Ongoing projects

Post-quantum security is already part of our ongoing projects.