SouthernQuantum

Cryptographic Agility

The post-quantum horizon

The threat is not theoretical. It is here already.

Data encrypted today can be captured now and decrypted later, the moment a sufficiently powerful quantum computer exists, a risk already known as "harvest now, decrypt later." NIST finalised its first post-quantum cryptography standards in 2024. The migration window is open, and it's shorter than most security roadmaps assume.

Why it can't wait

  • 2024NIST finalises ML-KEM, ML-DSA, and SLH-DSA
  • NowEncrypted data can already be harvested for later decryption
  • YearsTypical timeline to migrate a large organisation's cryptography

Our methodology

We follow ASD's LATICE framework.

Southern Quantum's engagements are structured around the Australian Signals Directorate's LATICE framework for post-quantum migration: five phases covering the full lifecycle, not a one-off project.

LocateFind every place cryptography is used: apps, cloud services, hardware, and operational technology.
AssessEvaluate the value and sensitivity of what each vulnerable algorithm protects.
TriagePrioritise by risk, exposure, and how urgent each system really is.
ImplementApply post-quantum algorithms using standardised, well-reviewed implementations.
Communicate & EducateKeep vendors, teams, and stakeholders aligned throughout the transition.

What we're building

Services designed around the migration lifecycle.

Southern Quantum is a new company, and we're building our service offering deliberately rather than all at once. Here's the shape of what's coming.

The bigger timeline

The industry's clock is already running.

These are indicative milestones drawn from published national and international roadmaps, not a Southern Quantum deadline, but the backdrop every migration plan has to account for.

2024NIST finalises the first PQC standards
2027Early movers complete priority-system migration
2030High-risk systems expected quantum-safe
2035Full transition across most sectors

Standards we build around

Grounded in the algorithms that will actually be used.

In 2024, NIST finalised ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205), the first standardised post-quantum algorithms. Regulatory pressure is following close behind, from the EU's NIS2 and DORA to guidance referencing CNSA 2.0 timelines. Southern Quantum's approach is built around these standards from day one, not retrofitted onto them.

Ready when you are

Let us help you get started.

Whether you're just starting to ask the question or already mid-migration, we're glad to talk through how to get started.