Last reviewed 10 November 2026
In real systems
Post-quantum public-key mechanisms do not live in isolation. They replace or accompany today's algorithms in the same places organisations already depend on public-key cryptography.
Key establishment appears in TLS handshakes that protect web traffic, in VPN tunnels that carry remote access, and in other channel protocols that negotiate session keys across a network. Digital signatures appear on software packages and firmware images so installers and devices can verify what they run. Certificates bind names to public keys and chain to trust anchors in browsers, devices, and enterprise policies.
Authority recommendation: NIST IR 8547, October 2026, treats hybrid constructions as a temporary hedge: combining a classical algorithm with a post-quantum one while products and trust stores catch up.
During that transition, not every change is a local setting. Protocol stacks, certificate profiles, devices, and software often need a supplier release before post-quantum algorithms appear in production. Configuration can enable what the product already ships; it cannot add support that is not in the build.
Next: Standardisation.
Sources
- NIST IR 8547, Transition to Post-Quantum Cryptography Standards, October 2026. NIST IR 8547