Quantum Threats Push Post-Quantum Cryptography Into Overdrive

A Deadline Without a Fixed Date

Washington is moving to treat quantum computing not as a distant hypothetical but as an active planning problem. Federal directives now frame cryptographic modernization as urgent, arguing that quantum computing has already undermined a basic assumption of digital security: that systems, once trusted, can stay trusted indefinitely 1. That shift in posture is showing up across government guidance, with agencies being urged to build practical roadmaps for transitioning to post-quantum cryptography (PQC), assess where quantum threats intersect with existing infrastructure, and modernize cryptographic systems before a capable quantum computer materializes 4.

The unease is not purely theoretical. Federal standard-setters are in the process of finalizing new post-quantum digital signature schemes meant to replace algorithms vulnerable to future quantum attacks — and even those replacements are already being stress-tested. Anthropic's Claude Mythos AI model, described as a research system aimed at cryptanalysis, was reportedly used to uncover a new attack against Hawk, one of the signature schemes under consideration for U.S. federal standardization, succeeding where human researchers had struggled for years 2. A related account of the same research describes Mythos surfacing two distinct cryptanalytic results: one against Hawk and another against a deliberately weakened variant of AES, while stressing that neither attack threatens cryptography currently deployed in production systems 3. Taken together, the two accounts suggest genuine, if early-stage, progress in using AI to probe the durability of next-generation encryption standards before they are locked in — a reminder that PQC candidates still need adversarial testing even as they move toward adoption.

Uneven Readiness Across Sectors

Outside the standards process, real-world preparedness looks patchy. The Hong Kong Monetary Authority found that local banks scored just 2.3 out of 10 on a quantum-readiness assessment, with most institutions still stuck in an early awareness phase rather than executing formal migration plans or pilot projects 6. That gap mirrors broader anxiety about consumer-facing infrastructure: commentary on VPN technology notes that while quantum computers cannot yet break standard encryption used to secure internet traffic, providers are beginning to treat post-quantum encryption as a future differentiator, anticipating a moment when today's protections no longer suffice 5.

Industry Responds

The commercial sector is moving to fill the readiness gap. Israeli startup QIZ Security raised $17 million for a platform designed to give organizations visibility into their cryptographic posture and help manage the transition to post-quantum algorithms 7, reflecting a broader emergence of quantum-computing-adjacent companies positioning themselves around cryptographic governance rather than quantum hardware itself.

Across government mandates, AI-assisted cryptanalysis, financial-sector audits, consumer security products, and venture-backed startups, the throughline is consistent: the transition to post-quantum cryptography is being treated as a multi-year infrastructure project, not a switch to flip once a quantum computer arrives.