Post-quantum ready — easy as flipping a switch

We've already done the hard work.

Confidencial's architecture is crypto-agile by design. Migration to NIST-approved post-quantum algorithms requires no change to how your data is protected today, or historically. Flip the switch when you're ready.

Supported algorithms
ML-KEM (CRYSTALS-Kyber)
FIPS 203
ML-DSA (CRYSTALS-Dilithium)
FIPS 204
AES-256-GCM
Already quantum-safe
Crypto-agile by design
No re-encryption needed
The No-Hype PQC Guide · June 2026

Here's what that means.

Most PQC discussions focus on a future problem. But many organizations are overlooking the more immediate issue: sensitive enterprise data is already broadly exposed in documents, SaaS platforms, and AI workflows today. This guide is for security leaders who need practical guidance on what to do, in what order, and under what timeline.

Karim Eldefrawy
Co-founder & CTO · 25+ yrs cryptography · 100+ publications
Forbes
Five chapters
01Timeline — when to act
02Migration — what to do first
03AI stack — the present-day risk
04Vendor claims — what to ask
05Compliance — what's required now
The framing problem

The threat you're planning for vs. the one happening now.

Most PQC discussions focus on a future problem. But the more immediate issue is being systematically overlooked. These are not the same threat.

Future · 2029–2035

Quantum computers break classical encryption

Cryptographically relevant quantum computers will be able to run Shor's algorithm and break RSA, ECDH, and ECDSA. Encrypted data harvested today will become readable.

~2029Google's internal PQC migration deadline
10,000Qubits — Caltech's revised estimate for Shor's
~2035US Government federal systems PQC deadline
Present · Right now

Sensitive data already readable in plaintext

Most enterprise unstructured data is not encrypted. Anyone who gets through the perimeter can read it. No quantum computer required. AI pipelines amplify exposure across more systems.

TodayData in documents, SaaS, AI already readable
TodayAI copilots ingest and amplify unencrypted content
TodayHarvest-now-read-now. No waiting required.

“It's not ‘harvest now, decrypt later.’ It's harvest now, read now. Why wait for quantum computers? If you get in today, you can already see everything.”

Karim Eldefrawy, Co-founder & CTO, Confidencial
Five chapters

What the guide covers.

01

Timeline

Stop waiting for permission to act. The migration takes 5–10 years. The window to start is now.

When to act
02

Migration

Don’t upgrade what you haven’t mapped. The right sequence: inventory first, remediation second.

What to do first
03

AI stack

The present-day risk hidden in your AI stack. Copilots ingest plaintext which amplifies exposure.

Present risk
04

Vendor claims

How to read vendor claims without getting burned. Five questions every vendor must answer.

What to ask
05

Compliance

What regulations and auditors actually require today, sector by sector. No speculation.

What’s required
Chapter 2 · Migration

Don’t upgrade what you haven’t mapped.

The most common and costly mistake is jumping to remediation before knowing what you have. The right sequence is fixed:

STEP 01
Understand your data
Know what sensitive data you have and where it lives
STEP 02
Build a CBOM
Map every cryptographic dependency — algorithms, where used, what they protect
STEP 03
Analyze algorithms
RSA, ECDH, ECDSA are most urgent. AES-256 is quantum-resistant at current key lengths
STEP 04
Prioritize by exposure
Sensitivity × exposure window. Data with 5+ year life is already inside the harvest window
CBOM — CRYPTO BILL OF MATERIALS
Your cryptographic inventory

A CBOM is an inventory of every cryptographic dependency in your environment: algorithms in use, where they’re used, what they protect, and what breaks if they’re compromised. Without it, PQC migration planning is guesswork.

Algorithms in use across all systems
Dependencies and what breaks on replacement
Sensitivity and lifecycle of what’s protected

“Crypto inventory is foundational. Without it, you’re guessing. The first step is knowing what data you have and how it’s protected. Everything else depends on that.”

Karim Eldefrawy
Chapter 4 · Vendor claims

Five questions to ask every vendor claiming post-quantum security.

"Quantum-safe," "quantum-ready," and "quantum-resistant" are used interchangeably. They do not mean the same thing. These five questions cut through it.

01

How is the data protected?

Which algorithm, which implementations and libraries? Name them.

02

When is it protected?

In transit only? At rest? At the content layer? TLS secures the pipe, not what’s inside it once received.

03

Who is it protected for?

Does protection persist when data moves outside your environment, into third-party systems or AI?

04

How will PQC be enabled?

Firmware update? API change? Full re-architecture? Be specific about timeline and scope.

05

How will PQC keys be protected?

Is the root of protection tied to an HSM or Cloud KMS? Where do the keys live?

The tells of PQC-washing: vague claims with no algorithm specifics; “ready” language with no published roadmap; protection that only applies to data in transit; no answer to what happens when data leaves the system. Vendors doing real work will name the algorithm, show where in the stack it’s applied, and be honest about what’s shipping versus still in progress.

“Quantum is a proxy for a much bigger issue: most data is not properly secured. The problem is not future decryption. The problem is present-day exposure.”

Karim Eldefrawy
Chapter 5 · Compliance

What auditors will expect.

Requirements depend on the sector. As of May 2026:

SectorStatusWhat’s required now
Federal / Defense
Active requirementNSA CNSA 2.0 sets specific timelines. Some systems required to support PQC by 2027. US federal systems mandate: 2035. Active planning is effectively required now.
Financial Services
SignalingNo hard mandates yet. SEC, OCC, and FFIEC have all signaled interest. Quantum risk entering operational resilience frameworks. International jurisdictions moving faster.
Healthcare / HIPAA
EmergingNo specific PQC requirement yet. Underlying data protection obligations apply. Quantum risk to PHI entering compliance conversations.
Legal / Professional
EvolvingBar ethics require “reasonable data security.” What “reasonable” means when harvest-now adversaries are active is evolving. Firms advising regulated clients increasingly held to their sectors’ standards.
Minimum viable PQC posture right now
1
Document your risk assessment
A basic PQC risk assessment is better than silence
2
Build your CBOM
Know what algorithms are in use, where, and what they protect
3
Encrypt high-sensitivity data now
5+ year lifecycle data is already inside the harvest window. Don’t wait.
4
Have a migration roadmap
It doesn’t have to be finished. It has to exist and be actionable.
Karim Eldefrawy
Co-founder & CTO, Confidencial
25+ years in cybersecurity & cryptography
100+ published scientific works
SRI International research lineage
DARPA-funded cryptographic research
Forbes: Harvest Now, Read Now →
The closing argument

The right executive question is not only “how do we migrate to PQC?” It’s also: where is our sensitive data readable today, and how do we reduce that exposure at the content layer itself?

The quantum threat is accelerating: Google’s 2029 deadline, the Caltech 10,000-qubit research, and the US government’s 2035 mandate are converging signals that the cryptanalytic horizon is approaching faster than most enterprise risk models assumed. But before adversaries can decrypt your data later, they may already be able to read it now.

“You do not have a quantum problem. You have a data protection problem. Security that does not follow the data is ineffective once the data moves or can be copied at scale.”

See how Confidencial protects at the layer that matters

Content-layer encryption that deploys today, travels with your data, and is PQC-ready by design.

Don’t wait for infrastructure migration to complete. Data-layer protection can be deployed now, closes the present-day exposure gap, and makes you PQC-agile for whatever the quantum timeline brings.

PQC-ready by design
Algorithm-agnostic key management which means migration requires no re-encryption
Deploys today
No waiting for infrastructure migration because content-layer encryption is independent
DARPA-origin research
Built at SRI International under DARPA funding for national security workloads