PQC algorithms: what identity and crypto teams need to map first

TL;DR: ML-KEM, ML-DSA and SLH-DSA form the first NIST post-quantum standards, according to Fortanix, but the real migration blocker is visibility into where RSA and elliptic-curve cryptography still protects key exchange, signatures and certificates. The work starts with a crypto inventory, because harvest-now, decrypt-later risk already exists and crypto-agility only matters once dependencies are mapped.

Editorial analysis by NHI Mgmt Group, based on content published by Fortanix: “PQC Algorithms Explained: ML-KEM, ML-DSA, and SLH-DSA”.

Key questions

Q: How should teams prioritise data for post-quantum cryptography migration?

A: Prioritise data by confidentiality lifetime, replaceability, and exposure spread.

Q: Why does quantum risk matter before quantum computers can actually break RSA?

A: Quantum risk matters early because attackers can record encrypted traffic today and decrypt it later once enough quantum capability exists.

Q: What breaks when organisations delay post-quantum migration for sovereign certificate authorities?

A: Delaying migration leaves the certificate authority hierarchy dependent on algorithms that may not survive future quantum attacks.

Practitioner guidance

• Map every RSA and elliptic-curve dependency Inventory systems, applications, data stores, certificates, and signing workflows so you know where vulnerable public-key cryptography remains in use.
• Classify cryptographic use by business criticality Rank high-value data, long-lived trust anchors, and externally exposed services first so migration work follows exposure, not convenience.
• Build a crypto-agility roadmap Plan for algorithm substitution without rebuilding applications, and require vendors to explain how they will support transitions to NIST-approved PQC standards.

Bottom line: The central risk is not only future quantum capability but the current inability to map where vulnerable public-key cryptography still protects trust and data.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →