POST-QUANTUM SECURITY: THE HIDDEN UPGRADE

Summary from the TLDR Crypto newsletter

Google's 2026 quantum computing progress report set a 2029 PQ readiness target, converting the migration from deferred planning to current procurement after NIST finalized ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) as binding standards. The "harvest now, decrypt later" attack vector is operational today, with adversaries archiving encrypted data for decryption once fault-tolerant quantum hardware matures, a threat with acute implications for blockchain infrastructure where ECDSA and EdDSA wallet key material and transaction signatures are permanently on-chain and cannot be retroactively re-encrypted. Migration spending is concentrating in four areas: hardware security modules and trusted execution environments, crypto-agile embedded devices, machine identity and certificate lifecycle management, and quantum-safe network deployment across telecom and sovereign infrastructure. Thales, Infineon, CyberArk, SK Telecom, and NTT are the named beneficiaries of this multi-year cycle, while blockchain protocols face the same ECC replacement pressure as traditional PKI infrastructure and cannot address it through a software patch alone.