The Future of Quantum Cryptography: Advancements and Challenges

The quantum security market has split: PQC is a software problem, QKD is a physics problem. This demands different companies, different capital, and different talent.

Post-quantum cryptography (PQC) is a software upgrade, relying on new mathematical assumptions for security. Quantum Key Distribution (QKD) requires a hardware build-out, using quantum mechanics to distribute keys. A future quantum computer drives the need for both, but their commercialisation paths are diverging.

Quantum People observes a common error: framing this shift solely as a defensive upgrade. This view focuses on stronger locks. We instead see the forging of entirely new types of keys.

Commercial deployment, not just academic discussion, now confirms this split. Bain & Company collaborates with IBM on PQC risk assessments. The Philadelphia Fed has warned of systemic risk to finance if current public-key cryptography fails. BTQ Technologies, for instance, secures Bitcoin transactions – a digital asset market valued in trillions of dollars – using NIST-standardised algorithms. This forms a concrete supply chain. The US Cybersecurity and Infrastructure Security Agency (CISA) publishes lists of approved PQC hardware and software, formalising the market.

What is driving Post-quantum cryptography (PQC) migration?

The driver is a credible threat: a large-scale quantum computer capable of breaking current public-key encryption standards like RSA and ECC.

The US National Institute of Standards and Technology (NIST) selected the first PQC algorithms in 2022. This acted as the policy signal, shifting the problem from research labs to corporate budgets.

Finance leads this shift. The ability to forge transactions or decrypt financial data represents an existential risk. This motivates work like BTQ Technologies’ efforts to secure digital assets.

For governments, the focus is national infrastructure. CISA’s hardware and software lists aim to standardise the PQC market and guide procurement. This formalises the supply chain and accelerates PQC migration.

Is quantum a threat or an opportunity?

Viewing quantum computing solely as a security threat misrepresents its impact. This perspective focuses on defence, overlooking the new computational tools under development. The task is not merely to build higher digital walls; it is to construct new types of engines.

This distinction drives two separate tracks for commercialisation and investment.

The first track is defensive: PQC. This presents an algorithmic challenge for mathematicians and computer scientists. Their work, evident in the NIST competition and at firms such as BTQ Technologies, represents a mandatory upgrade cycle for global digital infrastructure. The investment model aligns with enterprise software.

The second track is constructive: QKD. This is a physics and engineering challenge. It requires building hardware that harnesses quantum phenomena to enable new capabilities. QTI Srl, a spin-off from Italy’s National Research Council, exemplifies this by building reconfigurable QKD systems. Here, security is anchored in the laws of physics, not on assumed mathematical difficulty. The investment model is deep-tech hardware, characterised by capital intensity and longer timelines.

The market is acquiring new capability, not just security.

What does the new cryptographic hardware look like?

It takes the form of specialised photonics from deep-tech spin-offs. QTI Srl, established in 2020 from Italy’s CNR-INO institute, provides a direct example. They build physical quantum crypto modules, not just research papers.

QKD systems transmit single photons to establish a secret key. Quantum mechanics dictates that observing a photon alters its state, immediately alerting users to an intruder. PQC operates on the assumption that a mathematical problem is computationally hard; QKD, by contrast, physically proves eavesdropper presence.

This hardware is complex: it requires single-photon sources, sensitive detectors, and specialised optics. Founders typically hold PhDs from national laboratories, commercialising publicly funded research.

The software-based PQC track also generates specific hardware demands. CISA’s approved product lists drive a market for PQC-compliant servers and network devices. The new algorithms demand more computation and larger keys than legacy standards. This raises latency and power consumption, particularly in smaller form factors. While firms like Silicon Quantum Computing or SemiQon do not directly develop PQC, their advanced silicon fabrication methods could inform classical chip designs optimised for these new cryptographic tasks.

What are the consequences for talent and hiring?

The cryptographic field is dividing. PQC demands classical cryptographers and software engineers. QKD requires quantum hardware engineers and physicists.

Misjudging this fundamental split will lead to critical talent gaps.

Sources

• Post-quantum cryptography for modern security
• Quantum Key Distribution (QKD) and Quantum Cryptography QC
• Collaboration pairs IBM Consulting’s quantum …
• How Quantum Computing Threatens Cryptography
• BTQ Technologies Demonstrates Quantum-Safe Bitcoin Using NIST …
• Investing in Digital Assets | Franklin Templeton Institutional