← Back to Blog Industry

Post-Quantum Cryptography for Financial Services

11 min read
Post-Quantum Cryptography for Financial Services - QNSQY post-quantum encryption guide

Financial Data: The Highest-Value Target

Financial institutions hold the most valuable digital assets on earth: account credentials, transaction histories, inter-bank transfer records, and personal financial data for billions of people. This makes them the primary target for a class of attack known as harvest-now, decrypt-later, where adversaries intercept and store encrypted communications today with the expectation of decrypting them once cryptographically relevant quantum computers become available.

The threat is not hypothetical. Nation-state actors have the resources and motivation to stockpile encrypted financial data for years. Banking records must be retained for a minimum of seven years under regulations such as the U.S. Sarbanes-Oxley Act (SOX), and tax records often carry similar retention requirements. Any encrypted financial data captured today could be decrypted well within its legally mandated retention period if quantum computers advance on the timelines predicted by researchers.

For a deeper explanation of this attack strategy, see our article on harvest-now, decrypt-later attacks.

The Regulatory Landscape

Financial institutions operate under some of the most demanding regulatory frameworks in the world, and several of these frameworks have direct implications for cryptographic practices.

PCI DSS v4.0

The Payment Card Industry Data Security Standard version 4.0 was released in March 2022 and became mandatory in March 2025. PCI DSS v4.0 requires "strong cryptography" to protect cardholder data both in transit and at rest. While the standard does not yet mandate post-quantum algorithms specifically, it requires organizations to maintain an inventory of cryptographic assets and to have a plan for updating cryptographic implementations as standards evolve. Financial institutions that rely on RSA or ECC for card transaction encryption will need to demonstrate a credible migration path to quantum-resistant algorithms as the threat landscape changes.

Sarbanes-Oxley Act (SOX)

SOX requires publicly traded companies to retain financial records for a minimum of seven years. These records are typically encrypted at rest using classical algorithms. Any breach of that encryption, whether today or in seven years, constitutes a compliance violation and carries severe penalties. The intersection of long retention periods and advancing quantum computing capability makes SOX-regulated data particularly vulnerable to harvest-now, decrypt-later attacks.

European DORA

The Digital Operational Resilience Act (DORA) entered into force in the European Union in January 2025. DORA requires financial entities to implement comprehensive ICT risk management, including cryptographic controls. It mandates that financial institutions identify, classify, and mitigate risks to their digital infrastructure, which explicitly includes the risk posed by advances in quantum computing to existing cryptographic protections. Organizations subject to DORA must demonstrate that they are monitoring emerging cryptographic threats and have plans to address them.

Basel Committee Guidance

The Basel Committee on Banking Supervision, which sets the global regulatory framework for bank capital and risk management, has acknowledged quantum computing as an emerging risk to financial stability. The Bank for International Settlements (BIS) published a report in 2024 titled "Quantum computing and the financial system" that outlined the systemic risks quantum computers pose to the cryptographic foundations of the global financial infrastructure.

Why Banks Are Particularly Vulnerable

The financial sector's exposure to quantum risk goes beyond individual institutions. The entire system is interconnected through shared infrastructure that relies on classical public-key cryptography.

TLS/SSL in Online Banking

Every online banking session, mobile banking app connection, and API call between financial systems is protected by TLS (Transport Layer Security). Current TLS implementations use RSA or ECDHE (Elliptic Curve Diffie-Hellman Ephemeral) for key exchange during the handshake. Both RSA and ECDHE are vulnerable to Shor's algorithm running on a sufficiently powerful quantum computer. This means that a recorded TLS session from today could be decrypted in the future, exposing login credentials, account numbers, and transaction details.

The SWIFT Network

SWIFT (Society for Worldwide Interbank Financial Telecommunication) handles approximately 45 million messages per day for over 11,000 financial institutions across more than 200 countries. SWIFT messages contain inter-bank transfer instructions, securities settlement data, and trade finance information. The cryptographic protocols protecting these messages rely on classical algorithms. A compromise of historical SWIFT traffic would expose the financial transaction records of virtually every major bank in the world.

Inter-Bank Settlement Systems

Central bank settlement systems such as Fedwire (United States), TARGET2 (European Union), and CHAPS (United Kingdom) process trillions of dollars in transactions daily. These systems use classical cryptography for authentication and confidentiality. The records they generate, including who paid whom, when, and how much, represent some of the most sensitive financial data in existence.

Blockchain and Digital Assets

Blockchain networks such as Bitcoin and Ethereum rely on elliptic curve cryptography (ECDSA) for transaction signing and address derivation. A quantum computer running Shor's algorithm could derive private keys from public keys, enabling an attacker to forge transactions and steal funds. Bitcoin addresses that have been used to send transactions have their public keys exposed on the blockchain, making them directly vulnerable. The Bitcoin network has over $1 trillion in total value. Ethereum and other smart contract platforms face similar exposure. The cryptocurrency industry has begun researching quantum-resistant signature schemes, but no major blockchain has migrated yet.

Guidance from Central Banks

Central banks and financial regulators have begun to acknowledge the quantum threat explicitly. The BIS report on quantum computing and the financial system identified several key concerns: the vulnerability of public-key cryptography used in payment systems, the risk to digital identity and authentication frameworks, and the potential for systemic disruption if quantum attacks compromise critical financial infrastructure simultaneously.

The Federal Reserve has published research on quantum computing risks to financial stability, and the European Central Bank has included quantum computing in its technology risk assessments. These institutions recognize that the financial system's reliance on RSA and ECC creates a single point of failure that quantum computing could exploit.

NIST PQC Standards: The Path Forward

The U.S. National Institute of Standards and Technology (NIST) spent eight years evaluating post-quantum cryptographic algorithms before publishing its first set of standards. These standards provide the foundation for quantum-resistant cryptography in financial services:

  • FIPS 203 (ML-KEM) defines a key encapsulation mechanism based on module lattices, replacing RSA and ECDH for key exchange
  • FIPS 204 (ML-DSA) defines a digital signature algorithm based on module lattices, replacing RSA and ECDSA for authentication and non-repudiation
  • FIPS 205 (SLH-DSA) defines a stateless hash-based signature scheme as a conservative alternative to ML-DSA

These standards are designed for exactly the kind of high-assurance environments that financial institutions require. For a comprehensive overview, see our introduction to post-quantum cryptography.

The Hybrid Cryptography Approach

Financial institutions cannot simply replace their existing cryptographic infrastructure overnight. The migration must be incremental, and it must not break existing systems. This is where hybrid cryptography becomes essential.

Hybrid cryptography combines a classical algorithm (such as X25519 or ECDH) with a post-quantum algorithm (such as ML-KEM) so that both must be broken to compromise the protected data. This approach provides several critical advantages for financial institutions:

  • Backward compatibility: Systems that do not yet support PQC can fall back to the classical component
  • Defense in depth: If a vulnerability is discovered in either the classical or post-quantum algorithm, the other still provides protection
  • Regulatory compliance: The classical component satisfies current regulatory requirements while the PQC component addresses future threats
  • Incremental deployment: Hybrid schemes can be rolled out gradually across complex financial infrastructure

For a detailed explanation of how hybrid encryption works, see our article on hybrid encryption.

Key Management Challenges

Financial institutions face unique key management challenges when migrating to post-quantum cryptography. PQC algorithms generally produce larger keys and ciphertexts than their classical counterparts. ML-KEM-1024 public keys are 1,568 bytes compared to 32 bytes for X25519. ML-DSA-87 signatures are 4,627 bytes compared to 64 bytes for Ed25519.

These larger sizes have practical implications for financial infrastructure:

  • Hardware Security Modules (HSMs) used for key storage and cryptographic operations may need firmware updates or replacement to support PQC key sizes
  • Certificate chains used for TLS and code signing become significantly larger, affecting handshake performance
  • Smart cards and payment terminals have limited storage and processing power, requiring careful algorithm selection
  • Key rotation policies must account for the increased bandwidth required to distribute PQC keys

Migration Strategy for Financial Institutions

A successful migration to post-quantum cryptography in financial services requires a phased approach:

Phase 1: Inventory and Assessment

Identify every system, protocol, and data store that uses public-key cryptography. Classify data by sensitivity and retention period. Data with the longest retention requirements and highest sensitivity should be prioritized for migration. This aligns with PCI DSS v4.0 requirements for maintaining a cryptographic asset inventory.

Phase 2: Protect Data at Rest

Begin encrypting sensitive files, documents, and archives with hybrid PQC algorithms. This is the most straightforward step because it does not require changes to network protocols or counterparty coordination. Individual files containing financial records, audit trails, customer data, and compliance documentation can be protected immediately.

Phase 3: Upgrade Internal Protocols

Migrate internal TLS connections, VPN tunnels, and API authentication to hybrid PQC schemes. This requires coordination across internal teams but does not depend on external partners.

Phase 4: External Protocol Migration

Work with counterparties, payment networks, and regulators to migrate external-facing protocols. This is the most complex phase and requires industry-wide coordination.

Protecting Financial Documents with QNSQY

While the migration of network protocols and inter-bank systems is a multi-year effort, financial institutions can begin protecting sensitive files immediately. QNSQY provides file-level hybrid post-quantum encryption that addresses Phase 2 of the migration strategy directly.

QNSQY encrypts files using ML-KEM combined with X25519 for key exchange and AES-256-GCM for symmetric encryption. Digital signatures use ML-DSA combined with Ed25519. This hybrid approach ensures that financial documents are protected against both classical and quantum attacks.

Key capabilities relevant to financial services:

  • Air-gapped operation: QNSQY's Linux CLI uses a two-phase sandbox: application-layer controls pin billing connections to billing.quantumsequrity.com (pinned DNS + TLS 1.3 + PQC envelope); seccomp-bpf then kills ALL network syscalls before crypto operations (kernel-enforced, irreversible). File content, passwords, and cryptographic keys never leave the machine.
  • Audit logging: Pro and Business tiers include comprehensive audit logging that records every cryptographic operation, supporting compliance with SOX, PCI DSS, and DORA audit trail requirements.
  • Argon2id key derivation: Password-based encryption uses Argon2id with configurable memory costs (128 MB, 256 MB, or 512 MB), providing strong resistance against brute-force attacks on encrypted financial archives.
  • Digital signatures: ML-DSA + Ed25519 hybrid signatures provide non-repudiation for financial documents, ensuring that signed records cannot be forged even by a quantum-equipped adversary.
  • Threshold encryption: Business tier supports M-of-N threshold encryption using Shamir's Secret Sharing, enabling multi-party authorization workflows for high-value financial operations.

Insurance and Liability Implications

Financial institutions carry cyber insurance policies that typically cover costs arising from data breaches. As quantum computing risks become better understood, insurers may begin requiring evidence of post-quantum migration as a condition of coverage. An institution that suffers a retroactive quantum decryption of customer data years from now may face denial of insurance claims if it failed to adopt available quantum-resistant encryption when standards were published. Proactive adoption of PQC is not only a security measure but a risk management strategy that strengthens an organization's position in insurance negotiations and regulatory inquiries.

The Cost of Waiting

Every day that financial data is encrypted with classical-only algorithms is another day of exposure to harvest-now, decrypt-later attacks. The seven-year retention requirement under SOX means that data encrypted today must remain secure until at least 2033. Given the pace of quantum computing research, that timeline is uncomfortably close to many expert estimates for when cryptographically relevant quantum computers may become operational.

Financial institutions that begin migrating to hybrid post-quantum cryptography now will be in compliance when regulations inevitably mandate PQC. Those that wait will face a compressed migration timeline under regulatory pressure, with all the risks and costs that entails.

The path forward is clear: adopt hybrid post-quantum cryptography now, starting with the most sensitive data at rest, and expand coverage systematically across the entire financial infrastructure.

Sources

Related Articles

Protect Financial Data Today

QNSQY provides hybrid post-quantum encryption for sensitive financial documents, with audit logging and air-gapped operation.

View Plans

Originally published at quantumsequrity.com/blog/pqc-financial-services.