With post-quantum algorithms standardised, the question is no longer which ciphers but which systems first. Browsers and major cloud services have already switched key exchange. The long tail of embedded devices, VPNs and signed firmware is where the work remains.
A realistic timeline
Most respondents expect hybrid key exchange everywhere within two years and signature migration within five. Hardware with ten-year lifespans is the problem: anything shipped today without upgrade paths will outlive the transition.
Key takeaways
- Browsers and major clouds already use hybrid key exchange
- Signatures lag key exchange by years
- Embedded devices are the hard tail
This story is part of our ongoing coverage of cybersecurity. We will update it as more details emerge.
