The official home of the standardised quantum-resistant algorithms. This is what organisations are actually migrating to — and it is classical cryptography, not QKD.
Advanced · 4 resources
Post-quantum cryptography
Classical cryptography designed to resist quantum attack — the NIST-standardised lattice and hash-based schemes now being deployed, entirely separate from QKD.
Learn first:Shor's algorithm
Why it matters
It is the immediate practical consequence of Shor’s algorithm and the one part of "quantum threat" work that organisations must act on today, because of harvest-now-decrypt-later.
After this you will be able to
- Name the NIST-standardised algorithms and their hardness assumptions
- Explain harvest-now-decrypt-later and migration timelines
- Distinguish PQC from QKD clearly
Start here
2 best places to start
Hand-picked and ordered. If you only have time for one, take the first.
Open Quantum Safe
Linux Foundation
Working open-source implementations of post-quantum algorithms plus TLS integrations, so you can actually run a quantum-resistant handshake rather than just read about one.
Also covering this
2 more resources
How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits
Craig Gidney & Martin Ekerå (2019)
The resource-estimate paper everyone cites when asked "when will RSA break?". A masterclass in turning an asymptotic algorithm into concrete hardware requirements.
Quantum Computing: Progress and Prospects
US National Academies
A sober expert assessment of feasibility and timelines, free to read online. Written for policymakers, which means it is unusually clear about uncertainty and risk.