Topic starter
01/08/2026 8:54 pm
TL;DR: Quantum computing will eventually weaken much of today’s public-key cryptography, while AES-256 remains robust, according to Yoti’s analysis. The practical issue is not only algorithm choice but cryptographic agility across identity, TLS, and long-lived personal data, where harvest-now-decrypt-later risks are already shaping transition plans.
Editorial analysis by NHI Mgmt Group, based on content published by Yoti: “How Yoti is preparing for the post-quantum cryptography era”.
Key questions
Q: How should security teams prepare identity systems for post-quantum cryptography?
A: They should start with a complete inventory of where cryptography underpins authentication, federation, signing, and encrypted transport.
Q: Why is harvest-now-decrypt-later such a concern for identity data?
A: Because intercepted ciphertext can remain valuable long after it is captured if the data has a long shelf life.
Q: What happens when one partner is not ready for post-quantum cryptography?
A: The whole trust chain can stay exposed if a dependency, library or relying party continues to rely on vulnerable algorithms.
Practitioner guidance
- Map cryptographic dependencies across identity flows Build a complete inventory of where RSA, elliptic-curve and TLS-based protections appear in identity, signing and data transfer paths, including third-party dependencies.
- Prioritise long-retention identity data for migration Rank biometric records, identity evidence, regulated personal data and signed artifacts by shelf life, then move the highest-value assets first.
- Consolidate signing into fewer control points Reduce the number of signing services and certificate paths so the eventual switch to post-quantum signatures can be executed consistently.
Bottom line: Post-quantum risk is now a governance problem for identity and data holders because legacy public-key cryptography will not age gracefully across long retention periods.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
01/08/2026 9:03 pm
Cryptographic agility is now an identity governance requirement, not a future engineering preference. Identity and verification systems hold data whose value can outlast current algorithms, which means crypto decisions have lifecycle consequences. The governance failure is assuming today’s public-key choices can safely protect tomorrow’s records. Practitioners should treat algorithm transition planning as part of data and identity control ownership, not as an isolated infrastructure upgrade.
A question worth separating out:
Q: How do teams decide whether to move to post-quantum signatures or wait?
A: Do not wait for a perfect ecosystem, because the main risk is deferred exposure of data that is already being collected. Teams should migrate the most sensitive and longest-lived identity assets first, while using hybrid approaches where they reduce immediate risk. The decision is about prioritising future impact, not proving theoretical readiness.
👉 Read our full editorial: Post-quantum cryptography raises identity security stakes for data holders