Post-Quantum Cryptography (PQC)
Future-proof your Identity infrastructure against quantum threats and protect against Harvest-Now, Decrypt-Later and Trust Now, Forge Later attacks
Cybercriminals are harvesting encrypted data today, betting that future quantum computers will expose your secrets.
Implementing PQC today ensures your identity data remains resistant to future quantum attacks.
The PKI depends on RSA and ECC algorithms that quantum computers will instantly break.
Crypto-agility allows for seamless PKI upgrades. Securing communication with quantum-safe TLS and certificates.
Governments and regulators (NIST, CNSA 2.0) are mandating timelines for quantum-resistant transitions.
Adopting quantum-safe-by-design principles ensures alignment with global mandates.
What is Harvest Now, Decrypt Later?
The digital world relies on Public Key Infrastructure (PKI) and cryptography to secure transactions and messaging, vulnerable to quantum machines. Attackers are currently intercepting and storing encrypted communications, betting that future quantum maturity will expose these secrets years after the theft.
What is Trust Now, Forge Later?
Trust Now, Forge Later targets your digital authority. Adversaries are currently recording public keys and digital signatures, waiting for the quantum capability to derive your private keys.
What is Post-quantum cryptography?
PQC uses hard mathematical problems that remain infeasible even for advanced quantum computers. PQC is a software and protocol upgrade that ensures future decryption keys remain inaccessible.
Crypto-agility with WSO2 Identity Platform
Quantum-safe TLS
WSO2 Identity Platform supports quantum-safe TLS using X25519MLKEM768 hybrid mode. It combines X25519 with NIST-standard ML-KEM-768 to secure TLS 1.3 against future quantum attacks.
Quantum-safe encryption
WSO2 Identity Platform uses AES-256 for internal encryption to strengthen resistance against quantum threats.