Post-quantum cryptography, a shifting horizon

As quantum computers grow more powerful, they threaten to eventually break the cryptographic schemes used today to sign and authenticate digital documents — RSA and elliptic-curve cryptography, in particular, would become vulnerable to a sufficiently powerful quantum computer. NIST finalized its first three post-quantum cryptography standards in 2024 (ML-KEM, ML-DSA, SLH-DSA), setting the regulatory foundation for a transition that is now accelerating: several deadlines converge in late 2026 and early 2027, between the scheduled end-of-life of certain existing standards and new acquisition requirements for sensitive systems. Organizations that rely on electronic signatures for long-term commitments — contracts, notarized deeds, regulatory filings — need to plan for this shift toward algorithms resistant to future computing power. The recommended approach rests on crypto-agility: separating application logic from the underlying cryptographic provider, so one algorithm can be swapped for another without rewriting the systems built on top of it.

The group's affiliate dedicated to research and development of post-quantum solutions.

EBH Q designs post-quantum solutions for the group — cryptographic research, hybrid algorithms, and applied products, including an electronic signature platform combining classical and post-quantum cryptography.

Industry benchmarks

2030

deadline set by NIST and the NSA (CNSA 2.0) to phase out quantum-vulnerable algorithms

NIST / NSA CNSA 2.0

84%

of organizations believe some of their encrypted data is already exposed to "harvest now, decrypt later" attacks

DigiCert Quantum Readiness Outlook, 2026

7%

of enterprises have deployed post-quantum cryptography at scale, despite 87% pursuing it

DigiCert Quantum Readiness Outlook, 2026

Proof point

PIBD methodology

PIBD (Peer Incident-Based Detection): our proprietary methodology cross-references signals observed across clients to identify an emerging threat before it reaches you — without ever exposing one client's data to another.

Our security practices are oriented toward the DGSSI (Morocco's national information systems security agency) framework.

Infrastructure hosted and operated in-house, outside third-party cloud platforms, for the systems that handle your security data.

Areas of intervention

Post-quantum cryptography is still a young field: several algorithm families coexist, and choosing the right trade-off (key size, performance, proof strength) depends on the use case.

  • Cryptographic monitoring
  • Hybrid algorithms
  • Prototyping
  • Performance evaluation
  • Robustness analysis

Reference

An organization integrated EBH Q into its contracting process to secure the long-term validity of its signed documents, in a context where the legal retention requirement for documents far exceeds the estimated vulnerability horizon of classical cryptographic schemes. The integration required no change to the existing user-facing signing flow.

Resources

See the threat bulletins and cybersecurity glossary on the EBH Intel hub, backed by EBH CyberThreat.

Contact

CISO / CIO

Describe your environment — we'll route the conversation to the right person.

Partner

You represent an organization looking to partner with EBH — write to us.