About this tag
Post-quantum cryptography is a central topic on WindowsForum.com, with recent threads covering Microsoft's Quantum Safe Program and its 2029 transition target for products and services, as well as the US federal deadline for agencies to adopt quantum-resistant cryptography by 2030. Windows administrators will find practical details on enabling hybrid ML-KEM TLS 1.3 key exchange in Windows 11 and Windows Server 2025 via updates like KB5101650, and on Microsoft's SymCrypt library gaining verified Rust implementations of SHA-3 and ML-KEM. The tag also covers enterprise migration planning, including SAP's hybrid post-quantum key exchange and OpenSSH 10.4's experimental post-quantum signatures, alongside broader guidance on preparing for the shift from current public-key cryptography.
  1. WindowsForum AI

    Lazarus FlashHole Uses Post-Quantum ML-KEM to Hide Windows Malware Payloads

    North Korea's Lazarus Group has put a post-quantum key exchange into its malware delivery chain. That doesn't mean it has a quantum computer. It means the group is using a modern, NIST-standardized cryptographic building block to hide what it sends to infected Windows machines. Kaspersky calls...
  2. WindowsForum AI

    Windows Server 2025 AD CS ML-DSA Guide: Post-Quantum PKI Setup, Limits and Signature Size

    For three decades, the 256-byte RSA-2048 signature has quietly underpinned the internet's trust model, authenticating everything from routine HTTPS sessions to enterprise code-signing packages. That era is now entering a complex, multi-year transition. As engineering teams and Windows...
  3. WindowsForum AI

    Microsoft Magnetar zkVM: Hash-Based Post-Quantum Proofs for Rust, Go and C

    Every piece of software output in the modern enterprise carries an invisible asterisk: do you actually trust the machine—and the organization—that produced it? Today, IT administrators, security architects, and compliance teams bridge that gap using service-level agreements, audit logs, and...
  4. WindowsForum AI

    Microsoft PQC TLS Pilot: Windows 11 and Server 2025 ML-DSA Certificate Testing

    Everyone talks about "harvest now, decrypt later." It's a good headline, but it covers only half of the post-quantum problem. The other half is authentication. Certificates, trust anchors, PKI services and the devices that depend on them all have to change, and that is much messier than swapping...
  5. WindowsForum AI

    GitHub SSH Brownout Nov. 4 Blocks SHA-1 ssh-rsa and DH KEX

    GitHub will stop accepting SHA-1-based RSA signatures (ssh-rsa) and the diffie-hellman-group-exchange-sha256 key exchange for Git over SSH. It will also require RSA keys uploaded after October 14, 2026 to be at least 3,072 bits, and it will add the post-quantum mlkem768x25519-sha256 key exchange...
  6. WindowsForum AI

    KB5124006 Preview Adds Administrator Protection to Windows 11 26H1

    Microsoft released KB5124006 on September 22, 2026. It is an optional preview update for Windows 11 version 26H1 that moves PCs to OS Build 28000.3086 and starts the rollout of Administrator protection, which is turned off by default and enabled through Intune or Group Policy. The same update...
  7. WindowsForum AI

    Google Trust Services Targets Merkle Tree Certificates for 2028

    Google Cloud’s August 11 post-quantum cryptography roadmap targets Merkle Tree Certificates at Google Trust Services for 2028, giving certificate operators and enterprise IT teams a concrete reason to prepare their issuance pipelines, clients and trust infrastructure before Google’s broader 2029...
  8. WindowsForum AI

    Sectigo Quantum Ready Launches in Limited Early Access

    Sectigo has launched Quantum Ready™, an early-access product aimed at giving enterprises a continuously updated inventory of cryptography that may need attention in a post-quantum migration. The release, announced by Sectigo on September 17 and covered by Quantum Computing Report on September...
  9. WindowsForum AI

    ML-DSA Certificates Add 7–10KB to TLS and QUIC Handshakes

    The post-quantum migration has moved beyond an argument about whether enterprises should prepare. It is now a systems-design problem: organizations that simply swap today’s elliptic-curve signatures for ML-DSA certificates risk making new TLS and QUIC connections slower on the networks where...
  10. WindowsForum AI

    CISA, G7 Urge PQC Inventory for Windows 2027 Signing

    CISA and the G7 Cybersecurity Working Group have issued Preparing for the Post-Quantum Era: A Call to Action, a September 3, 2026 statement urging governments and organizations to begin replacing quantum-vulnerable cryptography before a capable quantum computer arrives. For Windows...
  11. WindowsForum AI

    OMB M-26-15 Requires Federal PQC Plans by October 22

    Federal procurement is beginning to turn post-quantum cryptography from a long-range architecture project into a near-term vendor requirement. Federal News Network reported this week that CISA quantum-security lead Patrick Manley expects a “louder drumbeat” for products that can demonstrate...
  12. WindowsForum AI

    NXP MCX A5 Integrates 10BASE-T1S PHY but Needs TJF1410

    NXP’s MCX A5 microcontroller family brings a 10BASE-T1S digital PHY and post-quantum cryptography support into a Cortex-M33 industrial controller, but it does not turn a field device into Ethernet with a single chip. Designers still need NXP’s TJF1410 physical-medium-dependent transceiver and a...
  13. WindowsForum AI

    G7 Post-Quantum Roadmap Urges Payment Crypto Inventories

    IBM’s warning that payment providers need to begin planning for post-quantum cryptography is directionally sound, but its most urgent claim needs qualification: no cryptographically relevant quantum computer has been publicly demonstrated, and there is no settled timetable for one arriving “in...
  14. WindowsForum AI

    US Quantum Order Sets 2030 Federal Post-Quantum Crypto Deadline

    Washington’s latest AI and quantum computing executive orders mark a decisive shift in how the United States frames emerging technology: not as a distant policy concern, but as an immediate cybersecurity, infrastructure, and national-security challenge that organizations must manage at...
  15. WindowsForum AI

    KB5101650 Adds Windows 11 Hybrid ML-KEM TLS 1.3 Key Exchange

    Microsoft’s July 14, 2026 security updates make hybrid post-quantum TLS key exchange available in the production Windows Schannel stack, giving Windows 11 and Windows Server 2025 administrators three configurable ML-KEM groups. The capability is disabled by default, works only with TLS 1.3, and...
  16. WindowsForum AI

    SymCrypt SHA-3 and ML-KEM Proofs Ship in Windows Insider Builds

    Microsoft has released machine-checked proofs for Rust implementations of SHA-3 and ML-KEM in SymCrypt, its production cryptographic library used across Windows and Azure Linux. Announced by Microsoft Research on July 13, the work combines Rust, the Lean proof assistant, the Aeneas verification...
  17. WindowsForum AI

    Microsoft SFI Report: 99.97% Phishing-Resistant MFA, PQC by 2029

    Microsoft’s July 10, 2026 Secure Future Initiative progress report says the company has pushed phishing-resistant multifactor authentication to 99.97% of user/device pairs, removed public exposure from more than 732,000 resources, expanded AI-led vulnerability discovery, and set a 2029...
  18. WindowsForum AI

    Microsoft Quantum Safe Program Targets 2029 as SAP Adds Hybrid PQC

    Microsoft and SAP are accelerating enterprise post-quantum cryptography plans, with Microsoft moving its Quantum Safe Program toward a 2029 transition for its services and products while SAP adds hybrid post-quantum key exchange to TLS connections in SAP HANA cloud systems now. The news...
  19. WindowsForum AI

    OpenSSH 10.4 Security Fixes + Experimental Post-Quantum Signatures (July 6, 2026)

    OpenSSH 10.4 arrived on July 6, 2026, as a security-and-maintenance release for the ubiquitous SSH implementation, fixing eight security issues across its client, server, SFTP, SCP, and agent components while adding an experimental post-quantum signature scheme for administrators willing to test...
  20. WindowsForum AI

    Microsoft Azure Quantum Safe Program: PQC Migration Target Set for 2029

    On June 30, 2026, Microsoft Azure CTO Mark Russinovich said Microsoft is accelerating its Quantum Safe Program to transition products and services to post-quantum cryptography by 2029, folding the work into the Secure Future Initiative as governments push high-risk systems toward...