Quantum-era security comes in two very different forms, and confusing them leads to bad decisions. Quantum cryptography—best known as quantum key distribution, or QKD—secures key exchange with physics, using photons and special-purpose hardware. Post-quantum cryptography, or PQC, secures data with new mathematical algorithms that run on the ordinary computers and networks we already use. For protecting National Security Systems, the National Security Agency has come down clearly on one side: it does not recommend QKD, and it points to NIST-standardized quantum-resistant algorithms as the practical path forward.
The Quantum Threat to Data Security
The urgency behind both approaches is the same. As NIST has explained, researchers worldwide are racing to build quantum computers that would operate in radically different ways from ordinary computers and could break the encryption currently protecting "security and privacy for just about everything we do online." Today's public-key systems, as commonly described in reference works on post-quantum cryptography, rest on mathematical problems—integer factorization and discrete logarithms—that conventional computers find intractable but a sufficiently capable quantum computer could solve quickly.
That threat is what makes the two quantum-era approaches relevant, but they answer it in fundamentally different ways. One changes the physical channel used to share keys; the other changes the mathematics used to protect data. Understanding that distinction is the first step toward choosing sensibly between them.
Quantum Key Distribution (QKD): Physics-Based Security
Quantum key distribution is the best-known example of quantum cryptography. As NIST describes it, QKD is an early quantum cryptographic protocol in which two trusted partners share an encryption key—a string of bits or characters used to scramble and unscramble data. The key itself is not quantum; what is quantum is how it travels. It is transmitted using individual particles of light, or photons, detected by specialized sensors capable of recording single photons.
The theoretical appeal is real. According to the NSA, published theories suggest that the physics of quantum mechanical systems allows QKD to detect the presence of an eavesdropper—a feature standard cryptography does not provide. NIST likewise notes that the quantum approach has the potential to better detect and thwart interception. QKD has even been demonstrated in practice: in 2004, Austrian scientists used it to secure a bank transfer of funds to Vienna City Hall.
But a physics-based guarantee on paper is not the same as a deployable security system. QKD, as the NSA describes it, relies on special purpose technology and communicates over a dedicated communications link—requirements that shape every practical limitation that follows.
