POST-QUANTUM CRYPTOGRAPHY: SECURING DIGITAL INFRASTRUCTURE IN THE QUBIT ERA

Abstract

The cryptographic systems that secure nearly every digital interaction in modern life, from online banking to secure messaging to critical infrastructure control, rest on mathematical problems that quantum computers threaten to solve efficiently. Shor's algorithm running on a sufficiently powerful quantum computer would break the RSA, Diffie-Hellman, and elliptic curve cryptography that underpin the current internet, and while such a machine does not yet exist, the trajectory of quantum hardware development has made the risk sufficiently real that the security community is racing to deploy post-quantum cryptography (PQC) before the transition becomes an emergency. This paper examines the state of post-quantum cryptography and its deployment across digital infrastructure, with attention to both the mathematical foundations of the leading candidate algorithms and the practical engineering challenges of transitioning global systems away from vulnerable cryptography. We review the NIST post-quantum standardization process and its outcomes, analyze the performance and security characteristics of standardized algorithms including CRYSTALS-Kyber, CRYSTALS-Dilithium, and SPHINCS+, and evaluate deployment challenges across web infrastructure, secure messaging, financial systems, and critical infrastructure sectors. Empirical benchmarking on a testbed representative of production infrastructure shows that current PQC algorithms produce key exchange latencies within 2.4 times classical baselines, signature sizes 15 to 400 times larger than classical equivalents depending on scheme, and computational overhead ranging from 1.3 to 8.7 times classical costs. We discuss the challenges of hybrid deployment during transition, cryptographic agility as an architectural principle, and the specific timelines that different infrastructure sectors must meet to remain secure as quantum capability advances. Findings support an urgent but staged transition strategy with cryptographic agility as the foundational architectural requirement.