Quantum computing threatens cryptographic methods considered secure for decades. In particular, widely deployed asymmetric algorithms (such as RSA and ECDSA) can no longer be relied upon in the long term to protect sensitive data, ensure integrity, or shield communication. Luckily, not all cryptography is equally affected: Symmetric algorithms, where both parties share the same secret key, remain secure in a post-quantum setting. From now on, it would therefore be wise to replace asymmetric approaches, especially in critical use cases /1. 

Standards and regulation take shape

Breaking modern encryption depends on the availability of quantum computers with very large numbers of qubits /2. The likely arrival of such machines motivated the US National Institute of Standards and Technology (NIST) to begin standardizing new cryptographic algorithms in 2016. These algorithms had to be secure against quantum computers, but must be executable by standard computers. Furthermore, due to a lack of long-term, real-world testing, they should be used only in a hybrid combination with a standard algorithm to ensure data security, even if the post-quantum algorithm later proves to be insecure.

Regulation has also been created: In 2025, the European Union published a roadmap for the transition to PQC. High-risk use cases ought to have transitioned by 2030, while the rest have until 2035. Similarly, the European Cyber Resilience Act requires that products with digital elements provide authenticity, integrity and confidentiality.

The adoption of PQC is thus well underway. For instance, Cloudflare reports that as of December 2025, 52 percent of its HTTPS traffic is already protected against quantum computers.

PQC and embedded devices

Embedded devices pose a particular challenge in the PQC transition, especially as certain post-quantum secure algorithms are more memory intensive.

For embedded devices, PQC has to be taken into consideration not only when updating communication and authentication protocols but also for software verification, secure boot and secure manufacturing. In some cases, hardware redesign might even be needed to replace acceleration for standard algorithms like RSA. 

A secure investment

Although quantum computers capable of breaking today’s standard cryptographic schemes are still in the future, organizations can begin preparing today. Post-quantum algorithms have already been standardized and are ready for integration into software. However, caution is required as they should be deployed in hybrid constructions alongside established classical algorithms rather than used on their own.

A more detailed article on this topic will soon be published on the ABB Review online site.

References:

1. Samuel Jaques (University of Waterloo), “Landscape of Quantum Computing.“ Available: https://sam-jaques.appspot.com/quantum_landscape. [Accessed April 24, 2016]

Links:

1. European Commission, “A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography.” Available: https://digital-strategy.ec.europa.eu/en/library/coordinated-implementation-roadmap-transition-post-quantum-cryptography.
2. Cloudflare, “The 2025 Cloudflare Radar Year in Review: The rise of AI, post-quantum, and record-breaking DDoS attacks.” Available: https://blog.cloudflare.com/radar-2025-year-in-review.