Preparing For The Post-Quantum Cryptography Era

This report explains the risks that quantum computing poses to current public-key cryptography, highlights NIST’s post-quantum standardization (e.g., Kyber and Dilithium), and recommends a staged migration using hybrid cryptography to mitigate “harvest now, decrypt later” threats. It provides practical guidance on updating KEMs, TLS, and dependencies, emphasizes cryptographic inventory and alignment with evolving standards, and notes that Checkmarx SAST will introduce tests to identify PQ-unsafe algorithms and configurations.