Post-Quantum Cryptography

A developer has unveiled Veil, a new messaging app that combines a zero-knowledge architecture with post-quantum encryption, aiming to keep conversations private even against future quantum-computing attacks. The project's architecture documentation is public, and Hacker News commenters are digging into the technical choices, debating how the cryptography works and how much the server can actually see.

PowerDNS has published a blog post outlining how it is preparing DNSSEC for post-quantum cryptography, ahead of the expected transition of DNS signing algorithms to quantum-resistant standards. The piece addresses how DNS operators can get ready for larger keys and signatures as standards bodies move to replace current cryptography that could eventually be broken by quantum computers.

A policy analysis outlines how operators of operational technology, such as industrial control systems and critical infrastructure, can prepare for post-quantum cryptography migration. It argues organizations should start inventorying cryptographic assets and planning transitions now, since quantum-capable computers could eventually break widely used encryption protecting legacy systems that are difficult to upgrade.

A new open-source tool called PQC Triage lets developers paste a software dependency manifest and instantly see which cryptographic algorithms in their stack a quantum computer could break first. The tool aims to help teams prioritise migration to post-quantum cryptography as quantum computing advances. Discussion so far has been small but focused on its usefulness for security auditing and codebase triage.

Healthcare organizations are poorly positioned to defend against quantum computing threats, according to a Healthcare Dive report. Quantum computers are expected to eventually break widely used encryption, putting sensitive patient data at risk through 'harvest now, decrypt later' strategies. Experts are urging hospitals and health systems to begin migrating to post-quantum cryptography, but most have yet to take action.

WISeSat.Space has announced plans to deploy quantum-safe satellites, according to reports from WISeKey's space initiative. The company is positioning its satellite network to resist future quantum computing threats, which could break today's encryption. The move fits a broader push in the space and security sectors toward post-quantum cryptography for satellite communications and data protection.

wolfSSL has announced an optimization to ML-DSA post-quantum signature support in its wolfHSM hardware security module software, using an external-Mu approach. The technique is intended to reduce computation on secure hardware by hashing the message outside the HSM before signing. The announcement, shared on wolfSSL's official channels, is aimed at embedded and security developers evaluating post-quantum cryptography integration.

US technology services company SAIC has acquired a quantum encryption firm, according to a report from Virginia Business. The deal brings quantum-safe cryptography capabilities into SAIC's portfolio, positioning it for growing demand from government and defense clients seeking to protect sensitive data against future quantum computing threats. Terms of the acquisition were not disclosed in the initial report.

OpenSSH 10.6 has been released with a post-quantum signature algorithm enabled by default. The change means keys generated with earlier experimental implementations of the algorithm will need to be replaced, and administrators are being urged to regenerate keys when upgrading. The release marks another step in the migration toward quantum-resistant cryptography across critical internet infrastructure.

Ethereum co-founder Vitalik Buterin warned that many security experts assume only elliptic curve cryptography is at risk from quantum computing, while hash functions and lattice-based schemes remain safe. He cautioned that AI-driven mathematical breakthroughs over the next two years could seriously undermine the concrete security of lattice-based cryptography, calling this a major concern for post-quantum defenses.

wolfSSL announced that post-quantum cryptography support is coming to its Ada language wrapper, extending quantum-resistant algorithms to developers building security-critical applications in Ada. The update reflects the broader industry shift toward migrating TLS and cryptographic libraries ahead of expected quantum computing threats to current encryption standards.

The OpenSSH project has released version 10.6, which introduces post-quantum digital signatures and streamlines its release process for faster updates. The change reflects growing pressure on core internet infrastructure to adopt cryptography that can withstand future quantum computer attacks. System administrators and security watchers are discussing the new release and what it means for deployments.

Defense and government IT contractor SAIC has acquired ISC, a move aimed at strengthening its capabilities in quantum-ready encryption for federal clients. The deal positions SAIC to help agencies transition to post-quantum cryptography as quantum computing threatens current encryption standards. Details on price and terms were not immediately disclosed.

A bipartisan group of senators has introduced the Quantum-GUARD Act, a bill designed to shield the US electric grid from future quantum computing attacks. The legislation would direct FERC to assess quantum-related cybersecurity risks across the energy sector and encourage adoption of post-quantum cryptography. Supporters argue 'Q-Day', the moment quantum computers can break current encryption, demands preparation now.