Cryptographic algorithms and the quantum threat
Which algorithms quantum computers break, which remain safe, and the official deadlines for each.
| Algorithm | Used for | Quantum risk |
|---|---|---|
| DSA | Digital signature | Quantum-vulnerable |
| ECDH | Key establishment | Quantum-vulnerable |
| ECDSA | Digital signature | Quantum-vulnerable |
| EdDSA | Digital signature | Quantum-vulnerable |
| Finite-field Diffie-Hellman (DH / DHE) | Key establishment | Quantum-vulnerable |
| RSA | Digital signature, Key establishment | Quantum-vulnerable |
| 3DES (TDEA) | Symmetric encryption | Weakened by quantum |
| AES | Symmetric encryption | Weakened by quantum |
| MD5 | Hash function | Weakened by quantum |
| RC4 | Symmetric encryption | Weakened by quantum |
| SHA-1 | Hash function | Weakened by quantum |
| ChaCha20-Poly1305 | Symmetric encryption, Message authentication | Quantum-resistant |
| Classic McEliece | Key establishment | Quantum-resistant |
| FrodoKEM | Key establishment | Quantum-resistant |
| HQC | Key establishment | Quantum-resistant |
| Kyber (pre-standard draft) | Key establishment | Quantum-resistant |
| LMS / HSS | Digital signature | Quantum-resistant |
| ML-DSA | Digital signature | Quantum-resistant |
| ML-KEM | Key establishment | Quantum-resistant |
| SecP256r1MLKEM768 | Key establishment | Quantum-resistant |
| SecP384r1MLKEM1024 | Key establishment | Quantum-resistant |
| SHA-2 | Hash function | Quantum-resistant |
| SHA-3 | Hash function | Quantum-resistant |
| SLH-DSA | Digital signature | Quantum-resistant |
| X25519MLKEM768 | Key establishment | Quantum-resistant |
| XMSS / XMSS^MT | Digital signature | Quantum-resistant |
Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.