{
    "article_id": 1650,
    "public_id": "75cf2f27-ba9b-4048-92c0-923fb51a079b",
    "internal_identifier": null,
    "source_identifier": null,
    "status": "published",
    "type": "review",
    "title": "We Are on the Precipice of a Post-Quantum World: Are You Prepared? A Review of NIST-Approved Post-Quantum Cryptographic Mechanisms for Immediate Adoption in Financial Infrastructure",
    "title_secondary": null,
    "abstract": "Post-quantum cryptographic standardization is complete for the algorithms that matter most, yet adoption across financial infrastructure remains uneven and, in critical segments, largely absent. This paper argues that migration is no longer a research question but an execution question, and that the window for orderly transition is narrower than the commonly cited “Q-Day” horizon of 2030-2035 implies. Because adversaries can record encrypted traffic today and store it for decryption once cryptographically relevant quantum computers exist, the effective deadline for protecting data with multi-year confidentiality requirements has already passed. We review the NIST-approved suite — ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) — alongside hybrid key-exchange constructions now deployed at internet scale, and assess their applicability to financial systems. We map the compliance landscape consolidating around 2030 and 2035, including NIST IR 8547, NSA CNSA 2.0, and the 2026 G7 Cyber Expert Group roadmap, alingside converging UK and EU timelines. Finally, we offer a practical migration framework organized around cryptographic inventory, exposure-window triage, and crypto-agility. Our central finding is that technical barriers to beginning migration are substantially lower than institutional inertia suggests: for many systems, post-quantum key agreement is a library upgrade rather than a redesign.",
    "language": "en",
    "english_title": null,
    "english_abstract": null,
    "doi": "10.36287/setsci.25.9.001",
    "doi_url": "https://doi.org/10.36287/setsci.25.9.001",
    "resource_url": "https://www.set-science.com/a/75cf2f27-ba9b-4048-92c0-923fb51a079b",
    "pdf_url": "https://www.set-science.com/a/75cf2f27-ba9b-4048-92c0-923fb51a079b/pdf",
    "og_image": "https://www.set-science.com/assets/img/og-card-v2.png",
    "authors": [
        {
            "public_id": "9c6ac934-0982-473d-8d27-795d875e3610",
            "given": "Maria",
            "family": "Teigeiro",
            "full": "Maria Teigeiro",
            "literal": null,
            "orcid": null,
            "orcid_url": null,
            "email": "maria@realtimetaxes.com",
            "corresponding": true,
            "sequence": "first",
            "affiliations": [
                {
                    "name": "Real Time Taxes, Boston, MA, USA",
                    "department": null,
                    "country": null,
                    "country_code": null,
                    "ror": null,
                    "ror_url": null
                }
            ]
        }
    ],
    "keywords": [
        "post-quantum cryptography",
        "financial infrastructure",
        "TLS",
        "ML-KEM",
        "crypto-agility",
        "harvest-now-decrypt-later",
        "HNDL",
        "regulatory compliance",
        "DORA",
        "NIS2"
    ],
    "translations": [],
    "subjects": [
        {
            "name": "Finance",
            "label": "Finance",
            "path": "finance",
            "is_primary": true
        }
    ],
    "subject_names": [
        "Finance"
    ],
    "published_date": "2026-10-06",
    "published_year": "2026",
    "received_date": null,
    "accepted_date": null,
    "volume": "25",
    "issue": null,
    "page_first": "48",
    "page_last": "55",
    "article_number": "9",
    "conference": {
        "short_name": "ICOF2026",
        "full_title": "International Conference on Open Finance",
        "name": "International Conference on Open Finance",
        "acronym": "ICOF2026",
        "location": "Boston, United States",
        "start_date": "2026-09-24",
        "end_date": "2026-09-24",
        "public_id": "0181a00a-2de1-4dcf-9458-2c9fb1cfd6ed"
    },
    "proceedings": {
        "title": "Proceedings of the International Conference on Open Finance (ICOF 2026)",
        "series_title": "SETSCI Conference Proceedings",
        "publisher": "SET Technology",
        "isbn": "978-625-95366-7-5",
        "eisbn": "978-625-95366-7-5",
        "issn": null,
        "eissn": "2687-5527",
        "doi": "10.36287/setsci.2026.25",
        "doi_prefix": "10.36287",
        "slug": "proceedings-of-the-international-conference-on-open-finance-icof-2026",
        "public_id": "99f5c14a-5332-4630-9f4e-19033533a996",
        "url": "https://www.set-science.com/p/proceedings-of-the-international-conference-on-open-finance-icof-2026"
    },
    "license": {
        "name": "CC BY 4.0",
        "url": "https://creativecommons.org/licenses/by/4.0/",
        "code": "CC-BY-4.0",
        "open_access": true
    },
    "copyright": {
        "holder": "SET Technology",
        "year": "2026"
    },
    "funding_statement": null,
    "funders": [],
    "references": [
        {
            "order": 1,
            "raw": "P. W. Shor, \"Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer,\" SIAM J. Comput., vol. 26, no. 5, pp. 1484–1509, 1997.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 1997,
            "volume": null,
            "pages": null
        },
        {
            "order": 2,
            "raw": "C. Gidney and M. Ekerå, \"How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits,\" Quantum, vol. 5, p. 433, Apr. 2021.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2048,
            "volume": null,
            "pages": null
        },
        {
            "order": 3,
            "raw": "C. Gidney, \"How to factor 2048 bit RSA integers with less than a million noisy qubits,\" arXiv:2505.15917, May 2025.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2048,
            "volume": null,
            "pages": null
        },
        {
            "order": 4,
            "raw": "L. K. Grover, \"A fast quantum mechanical algorithm for database search,\" in Proc. 28th Annu. ACM Symp. Theory of Computing (STOC), 1996, pp. 212–219.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 1996,
            "volume": null,
            "pages": null
        },
        {
            "order": 5,
            "raw": "M. Mosca, \"Cybersecurity in an era with quantum computers: Will we be ready?,\" IEEE Security & Privacy, vol. 16, no. 5, pp. 38–41, 2018.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2018,
            "volume": null,
            "pages": null
        },
        {
            "order": 6,
            "raw": "National Institute of Standards and Technology, FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard, Aug. 2024.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2024,
            "volume": null,
            "pages": null
        },
        {
            "order": 7,
            "raw": "National Institute of Standards and Technology, FIPS 204: Module-Lattice-Based Digital Signature Standard, Aug. 2024.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2024,
            "volume": null,
            "pages": null
        },
        {
            "order": 8,
            "raw": "National Institute of Standards and Technology, FIPS 205: Stateless Hash-Based Digital Signature Standard, Aug. 2024.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2024,
            "volume": null,
            "pages": null
        },
        {
            "order": 9,
            "raw": "National Institute of Standards and Technology, Draft FIPS 206: FN-DSA (FFT over NTRU-Lattice-Based Digital Signature Algorithm), submitted for approval Aug. 2025.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2025,
            "volume": null,
            "pages": null
        },
        {
            "order": 10,
            "raw": "National Institute of Standards and Technology, Selection of HQC as an Additional Key-Encapsulation Mechanism for Standardization, Mar. 2025.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2025,
            "volume": null,
            "pages": null
        },
        {
            "order": 11,
            "raw": "D. Stebila, S. Fluhrer, and S. Gueron, Hybrid Key Exchange in TLS 1.3, IETF RFC 9954",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": null,
            "volume": null,
            "pages": null
        },
        {
            "order": 12,
            "raw": "K. Kwiatkowski, P. Kampanakis, B. Westerbaan, and D. Stebila, Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3, IETF RFC 10024, Aug. 2026.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2026,
            "volume": null,
            "pages": null
        },
        {
            "order": 13,
            "raw": "National Institute of Standards and Technology, NIST IR 8547 (Initial Public Draft): Transition to Post-Quantum Cryptography Standards, Nov. 2024. [Online]. Available: https://nvlpubs.nist.gov/nistpubs/ir/2024/NIST.IR.8547.ipd.pdf",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2024,
            "volume": null,
            "pages": null
        },
        {
            "order": 14,
            "raw": "Cloudflare, State of the Post-Quantum Internet in 2025, Oct. 2025. [Online]. Available: https://blog.cloudflare.com/pq-2025/",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2025,
            "volume": null,
            "pages": null
        },
        {
            "order": 15,
            "raw": "Cloudflare Radar, Post-Quantum Key Agreement Adoption Metrics, Q2 2026.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2026,
            "volume": null,
            "pages": null
        },
        {
            "order": 16,
            "raw": "Measurement Study of Post-Quantum Readiness of the Internet: 2026, arXiv:2606.16473, Jun. 2026.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2026,
            "volume": null,
            "pages": null
        },
        {
            "order": 17,
            "raw": "Internet Engineering Task Force, RFC 9000: QUIC — A UDP-Based Multiplexed and Secure Transport, May 2021.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2021,
            "volume": null,
            "pages": null
        },
        {
            "order": 18,
            "raw": "National Security Agency, Commercial National Security Algorithm Suite 2.0 (CNSA 2.0) Cybersecurity Advisory, Sep. 2022. [Online]. Available: https://media.defense.gov/2022/Sep/07/2003071834/-1/-1/0/CSA_CNSA_2.0_ALGORITHMS_.PDF",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2022,
            "volume": null,
            "pages": null
        },
        {
            "order": 19,
            "raw": "G7 Cyber Expert Group, Advancing a Coordinated Roadmap for the Transition to Post-Quantum Cryptography in the Financial Sector, Jan. 2026. [Online]. Available: https://home.treasury.gov/system/files/136/G7-CEG-Quantum-Roadmap.pdf",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2026,
            "volume": null,
            "pages": null
        },
        {
            "order": 20,
            "raw": "FS-ISAC, The Timeline for Post Quantum Cryptographic Migration, Sep. 2025.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2025,
            "volume": null,
            "pages": null
        },
        {
            "order": 21,
            "raw": "DigiCert, Quantum-Ready FN-DSA (FIPS 206) Nears Draft Approval from NIST, Sep. 2025. [Online]. Available: https://www.digicert.com/blog/quantum-ready-fndsa-nears-draft-approval-from-nist",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2025,
            "volume": null,
            "pages": null
        },
        {
            "order": 22,
            "raw": "National Cyber Security Centre, Timelines for Migration to Post-Quantum Cryptography, v1.0, Mar. 2025. [Online]. Available: https://www.ncsc.gov.uk/guidance/pqc-migration-timelines",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2025,
            "volume": null,
            "pages": null
        },
        {
            "order": 23,
            "raw": "NIS Cooperation Group, A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, v1.1, EU PQC Workstream, Jun. 2025.",
            "doi": null,
            "title": null,
            "authors": null,
            "source": null,
            "year": 2025,
            "volume": null,
            "pages": null
        }
    ],
    "statements": {
        "acknowledgements": null,
        "conflict_of_interest": null,
        "data_availability": null,
        "ai_disclosure": null
    },
    "credit": [],
    "history": {
        "published": "2026-10-06"
    }
}