An organisation that understands its cryptographic dependencies is better prepared to respond when standards change, algorithms are retired or vulnerabilities emerge.

Post-quantum cryptography is exposing a broader resilience issue: organisations need to become better at changing cryptography.

Post-quantum algorithms have moved beyond academic research into published standards and real implementations.

The mathematics behind post-quantum cryptography is different from the mathematics underpinning established approaches such as RSA and elliptic curve cryptography.

We still cannot say when a quantum computer capable of breaking today’s cryptography will arrive.