Post-Quantum Cryptography and Encryption
The defense side of the quantum threat: post-quantum encryption and the algorithms replacing today’s vulnerable cryptography. These guides cover the NIST signature and key-exchange standards, how lattice-, hash-, and code-based methods differ, which companies and chains are deploying them, and what moving to post-quantum cryptography changes for wallets and self-custody.
// FAQ
What is post-quantum cryptography?
PQC is a family of cryptographic algorithms designed to resist quantum attacks. The NIST standards (ML-KEM, ML-DSA, SLH-DSA, with Falcon and the code-based HQC alongside) are the main schemes crypto will migrate to. See our PQC plain-English guide.
What is ML-KEM?
ML-KEM is a post-quantum key-encapsulation mechanism, standardized by NIST as FIPS 203. Our ML-KEM guide explains how it works and why browsers already use it.
What is the difference between lattice, hash-based, and code-based cryptography?
Each rests on a different hard mathematical problem. Lattice-based schemes like ML-KEM are compact and fast; hash-based schemes like WOTS+ are conservative but larger; code-based schemes are long-studied but heavier. Our signatures comparison sets them side by side.
What are hybrid signatures and why do they matter?
A hybrid signature requires both a classical and a post-quantum signature, so the protection holds as long as either scheme does. It is the main bridge for migrating without a hard cutover. Our hybrid signatures guide explains how it works.
Are seed phrases safe from quantum computers?
The entropy in a seed phrase is not the weak point; the signatures derived from it are. So your backup should survive a migration, while the keys it produces may need to move to a post-quantum scheme. See our seed phrases vs PQC guide.
What is the difference between quantum-safe, quantum-resistant, and post-quantum?
“Quantum-safe” and “quantum-resistant” are used loosely and often interchangeably, whereas “post-quantum cryptography” refers specifically to algorithms built and standardized to resist quantum attacks. The PQC guide sorts out what each should mean.
Are hot wallets safe from quantum computers?
The wallet being hot or cold is less important than the signature scheme and whether your public key is already exposed on-chain. Our hot wallets vs cold wallets guide covers what to do.
