# Why the Transition to Post-Quantum Encryption Algorithms is Urgent New algorithms replacing RSA and ECC in the face of quantum computer threats. - **Source:** [Cloudflare Blog](https://blog.cloudflare.com) - **Published:** 2026-07-09 - **Topic:** [Data & AI](https://brifing.si/c/data-ai) - **Original article:** - **On Brifing:** https://brifing.si/s/75886e2d-b4c5-42fb-9a0b-2955e21571e7 ## Quantum Threat and RSA's Vulnerability Classical encryption algorithms like RSA and ECC can be broken by sufficiently advanced quantum computers. These computers don't exist yet but could arrive sooner than expected, posing a serious threat to data security. ## The Importance of ML-KEM and ML-DSA ML-KEM encryption and ML-DSA signature algorithms are designed to resist quantum attacks. Standardized by NIST in 2024, companies like Cloudflare have already started adopting these algorithms. ## Cloudflare's Post-Quantum Transition Plan Cloudflare aims to be fully post-quantum secure by 2029. Currently, much of its traffic is encrypted with ML-KEM, but signature algorithms also need updating. ## Advantages and Disadvantages of ML-DSA ML-DSA is secure against quantum attacks but produces larger data sizes compared to RSA and ECC. Some optimizations possible with RSA cannot be done with ML-DSA. ## New Signature Algorithms and NIST's Role NIST has advanced nine new post-quantum signature algorithms to the third round. Better algorithms like FN-DSA are expected to be standardized soon, crucial for quantum security. ## FN-DSA and Other Candidates FN-DSA (formerly Falcon), selected from a previous competition, is expected to be standardized soon. Other candidates include specialized algorithms like HAWK and SQIsign. ## Specialized and General-Purpose Algorithms Post-quantum algorithms are divided into specialized and general-purpose. General-purpose ones like ML-DSA offer balanced performance, while specialized ones like SQIsign excel in specific areas. ## The Superiority of Ed25519 Ed25519, though vulnerable to quantum attacks, still offers the best performance. It stands out with small sizes and fast signing times. ## Disadvantages of SLH-DSA and LMS Algorithms like SLH-DSA and LMS have limited use due to large signature sizes and slow signing times. Their security is also questioned. ## The Potential of HAWK and MQOM Algorithms like HAWK and MQOM attract attention with fast signing and verification times. However, their reliability is not yet fully proven. ## Challenges of Post-Quantum Transition Transitioning to post-quantum algorithms involves both technical and operational challenges. Updating existing systems and adopting new algorithms will take time. ## Critical Steps for the Future Post-quantum encryption is vital for the future of digital security. Starting with current solutions like ML-DSA will ensure security until better algorithms are developed. ## Sources covering this story - https://blog.cloudflare.com/ml-dsa-will-have-to-do/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._