Microsoft Security Blog: Quantum-safe security: Progress towards next-generation cryptography

Aug 21, 2025

—

Source URL: https://www.microsoft.com/en-us/security/blog/2025/08/20/quantum-safe-security-progress-towards-next-generation-cryptography/
Source: Microsoft Security Blog
Title: Quantum-safe security: Progress towards next-generation cryptography

Feedly Summary: Microsoft is proactively leading the transition to quantum-safe security by advancing post-quantum cryptography, collaborating with global standards bodies, and helping organizations prepare for the coming quantum era.
The post Quantum-safe security: Progress towards next-generation cryptography appeared first on Microsoft Security Blog.

AI Summary and Description: Yes

Summary: The text outlines Microsoft’s proactive initiatives to ensure quantum-safe cryptographic security in anticipation of future quantum computing capabilities that could compromise traditional public-key cryptography. It emphasizes the importance of immediate planning and long-term transformation to enhance cryptographic standards and practices, thereby supporting organizations to safeguard their infrastructures against emerging quantum threats.

Detailed Description:

– **Quantum Computing and Cryptography**: The text begins by highlighting the risks posed by scalable quantum computing on existing cryptographic methods, particularly public-key cryptography. This scenario could lead to authentication and identity verification vulnerabilities.

– **Preparation for Quantum-Safe Encryption**: Recognizing the potential threats, Microsoft is collaborating with various regulatory and technical bodies such as NIST and IETF to establish quantum-safe encryption standards.

– **The Importance of Post-Quantum Cryptography (PQC)**:
– Transitioning to PQC is portrayed as an extensive multiyear shift that mandates strategic planning rather than a swift action.
– Organizations are encouraged to leverage this opportunity to modernize and improve their cryptographic systems.

– **Investment in Quantum Technologies**: Microsoft’s long-term commitment includes developing advanced quantum computing technologies and participating in various PQC-related collaborations.
– Significant contributions relate to quantum algorithm development and experimental implementations, like trials of PQC-protected VPN tunnels.

– **Microsoft Quantum Safe Program (QSP)**:
– Launched in 2023 to bolster Microsoft and its partners against quantum risks, aligning with government mandates for transitioning to PQC.
– The QSP encompasses three main objectives:
– Update Microsoft’s services and supply chain for quantum safety.
– Assist customers in integrating quantum-safe technologies.
– Advocate global research and standards for quantum-resilience.

– **Implementation Strategy**:
– The strategy consists of three key phases:
1. Updates to foundational security components like SymCrypt for cryptographic consistency across products.
2. Enhancement of core infrastructure services, prioritizing essential security components.
3. Integration of PQC across all Microsoft services, including Azure and Microsoft 365.

– **Future Preparedness**:
– As quantum capabilities evolve, there’s an emphasis on addressing potential threats such as “Harvest Now, Decrypt Later” (HNDL) attacks through enhanced security protocols like TLS 1.3.

– **Call to Action for Organizations**: The text concludes with a call for organizations to start developing strategies for a quantum-safe future, underscoring the urgency of adopting these changes and the resources available to assist in this transition.

In summary, this text serves as a crucial guide for security professionals in understanding the shift towards quantum-safe cryptographic practices, the collaborative efforts underway, and the necessary strategic considerations for safeguarding digital infrastructures in the face of evolving technology.

1 2 2025 3 5 a Act advanced age AI algorithm All and anti app Arch art as at ated attack attacks authentication Azure Bi by C capabilities chain CI CIA co Col collaboration collaborative collaborative effort collaborative efforts commit Computing computing capabilities consistency core cross Crypto cryptographic cryptographic practices cryptographic security Cryptographic Standards cryptography Customer D de development digital digital infrastructure e emerging encryption Encryption Standards enhanced security exp face first for future g Gen generation git Global global standard global standards Go government graph H high Highlight HR http HTTPS identity identity verification implementation Implementation Strategy in infrastructure infrastructure services infrastructures initiatives integration investment io IRS J k Key key cryptography l Labor leading led Li long M man media Micro Microsoft Microsoft 365 Microsoft Quantum Safe Program Microsoft Security Microsoft Security Blog Microsoft services Mode Modern multi N next NIST no o of on one ons OPM opt organization organizations ory oS oss out over partners per phi planning porting post post-quantum post-quantum cryptography potential practices pre preparation preparedness pro proactive product products professionals Progress protocol protocols ps public Q quantum quantum computing quantum cryptography quantum era quantum technologies Quantum Threat quantum threats quantum-safe encryption quantum-safe security R rag rate Ray RCE re red regulatory research Resil resilience resource resources Risk risks Ro RoT s safe safe encryption safe security safety scalable search sec security security professionals security protocols service services shift side Sig size sizes source SSE standards STAR start strategic strategic considerations strategic planning strategies Strategy structures supply supply chain support Swift SymCrypt system systems T tech technical technologies technology ted text the threat threats TLS to Tor TP Transform transformation transition trial UI under up update updates US uth V verification VPN vulnerabilities Wi x z