Quantum Exposure¶
Quantum exposure identifies cryptographic uses that need attention when planning for quantum computing. PostQ considers the identified algorithm and available security settings, and separates the quantum conclusion from conventional weaknesses such as a hardcoded key.
What PostQ identifies¶
- Public-key cryptography, such as supported RSA and elliptic-curve uses, that needs migration review.
- Symmetric encryption, hashing, message authentication, and related uses that need effective-strength review.
- Recognized post-quantum algorithms and available parameter-set information.
- Missing or conflicting settings that limit the conclusion, with follow-up questions where available.
- Suggested alternatives for the applicable cryptographic purpose, where supplied.
Result categories¶
The following codes identify the categories used in results and distributions. Read the explanation and parameters alongside the category.
| Category | Meaning for your review |
|---|---|
QUANTUM_BROKEN |
The assessed public-key use is vulnerable to quantum attacks. Review its purpose and dependencies when planning replacement. |
QUANTUM_WEAKENED |
The assessed use needs review for reduced effective strength under quantum attacks. This is a different migration question from replacing vulnerable public-key cryptography. |
QUANTUM_RESISTANT |
PostQ identified a recognized post-quantum algorithm. Check its exact identity, parameters, and implementation before adopting it. |
NOT_QUANTUM_VULNERABLE |
The assessed use has low quantum risk and is not identified as a direct PQC migration target. Separate security weaknesses can still apply. |
UNKNOWN |
Available information does not establish a quantum conclusion. Obtain the missing algorithm or configuration context. |
CONTEXT_DEPENDENT |
The conclusion depends on additional information about the configuration or use. |
Reports can also carry quantum-risk levels: Unknown, Low, Medium, High, and Critical. These levels help order review work; they are not probabilities or numerical security scores. Use the category and its reason to understand the issue.
Review quantum strength is a follow-up action for weakened uses. It can appear even when all reported parameters are resolved; it does not mean a parameter is missing.
Post-quantum algorithm identity¶
Keep standardized and earlier algorithm names distinct: ML-KEM and Kyber, ML-DSA and Dilithium, and SLH-DSA and SPHINCS+ are not interchangeable claims of standards conformance. A recognized name or package establishes useful inventory context, not proof that the deployed implementation meets a standard.
Suggested alternatives need evaluation for the operation's purpose. A key-establishment algorithm is not a replacement for a signature algorithm, and an alternative is not necessarily a drop-in replacement for an existing API or protocol.
What this assessment does not establish¶
PostQ does not predict when a capable quantum computer will exist, calculate your data's required confidentiality lifetime, or verify end-to-end migration readiness. It does not certify a post-quantum implementation. Business importance, stored-data formats, interoperability, key management, and deployment constraints need input from your team.
Use Crypto Weaknesses for conventional security problems and Crypto Agility for indicators relevant to changing cryptography. For opening the affected items from a distribution, see Assessment Overview.