2025 is the ‘Quantum Year’, not only because 1925 saw the groundbreaking work of Werner Heisenberg, Erwin Schrödinger and other pioneers, which continues to shape our understanding of quantum mechanics to this day. A revolution is also unfolding right here and now: a tectonic shift is imminent in the field of IT security, driven by technological advances in quantum computing.
What are quantum computers and why do they pose a threat to today’s encryption?
Quantum computers are not simply faster versions of classical computers. They are based on entirely different physical principles: superposition, entanglement and quantum interference enable computational methods that offer exponential advantages for certain tasks. At first, this may sound like a distant prospect – and for many areas it still is – but in cryptography, in particular, the impact is already foreseeable.
The reason: many security methods used today, such as RSA, Elliptic Curve Cryptography (ECC) or Diffie-Hellman, are based on mathematical problems that are extremely difficult for classical computers to solve, such as factoring large numbers. However, a sufficiently powerful quantum computer could tackle these tasks within a reasonable timeframe using Shor’s algorithm. This would mean that a large part of our current digital security infrastructure would become obsolete overnight.
Post-quantum cryptography: the answer to the quantum threat
This is where quantum-secure cryptography comes into play, also known as post-quantum cryptography (PQC). Instead of relying on factorisation or discrete logarithms, these methods are based on mathematical problems that are difficult even for quantum computers to crack, such as lattice problems, hash-based signatures or code-based cryptosystems.
The US National Institute of Standards and Technology (NIST) has already selected several candidates, including CRYSTALS-Kyber for encryption and CRYSTALS-Dilithium for digital signatures. These methods are regarded as promising standards for the future.
‘Harvest now, decrypt later’: Why haste is of the essence
Even if a “large” quantum computer capable of breaking today’s encryption does not exist for another ten or fifteen years, the “Harvest now, decrypt later” scenario is already a threat today: Attackers, such as intelligence agencies, could already be intercepting and storing encrypted data in order to decrypt it later, once quantum computers become available. This is particularly critical for data that must remain confidential in the long term, ranging from classified government documents and financial information to patients’ medical records.
The path to crypto-agility
The transition to quantum-secure methods is not simply a matter of flicking a switch. Companies and institutions must improve their crypto-agility – that is, design systems in such a way that cryptographic components can be replaced without major disruption. Hybrid methods, which combine classical and post-quantum algorithms, are currently regarded as a sensible interim solution.
Cryptography assessment
Identify and document all cryptographic methods and certificates currently in use.
Establishing cryptographic agility
Design systems in such a way that algorithms can be replaced at a later date without major intervention.
Use hybrid methods
Combine classical and post-quantum algorithms to ensure a secure transition phase.
Together with partners from 17 European countries, the BSI published a joint statement on the topic of post-quantum cryptography in November 2024. In it, they call on industry, operators of critical infrastructure and public administration to initiate the transition to post-quantum cryptography, and outline the necessary steps to achieve this. Further information can be found on the BSI website and at quantum2025.de.
Mint Secure GmbH
How Mint Secure supports you in this
We help you adapt to this new reality and implement quantum-secure cryptography in products and enterprise environments.
Cryptography audit
We identify which cryptographic methods are in use in your systems and where action is required.
PQC Migration Consultancy
We guide you through the phased transition to post-quantum cryptography and hybrid methods.
Security Audit
We carry out comprehensive vulnerability assessments of critical systems, taking future threats into account.
Ready to get started? We offer a free initial consultation. Get in touch now.
Conclusion
The ‘Quantum Year’ 2025 marks a turning point: a century after the birth of quantum mechanics, we are witnessing how its principles are profoundly transforming not only research but also the global IT security architecture.
Those who act now can protect their own digital future; those who wait risk the clock ticking faster than expected.
Mint Secure provides you with comprehensive support in adapting to quantum-secure cryptography. Get in touch with us.
