Medium ThreatCryptography & ProtocolsCWE-326
Post-Quantum Cryptography: Migrating to ML-KEM
Prepare for the quantum computing era by migrating to NIST-approved post-quantum algorithms like ML-KEM (Kyber) & ML-DSA.
Vulnerability Overview
Quantum computers will break RSA and ECC via Shors algorithm.
Harvest now, decrypt later attacks store encrypted data for future quantum decryption.
Vulnerable Code
cipher_suites TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Relies on classic elliptic curves.
Remediated Code
cipher_suites TLS_X25519_KYBER768_DRAFT00Uses hybrid post-quantum key exchange.
Hardening Rules
- 1Use hybrid key exchange
- 2Inventory cryptographic assets
- 3Monitor NIST standards
Frequently Asked Questions
Is RSA dead?
Not immediately, but it is deprecated for long-term secrets in the face of quantum threats.