Quantum Safe Cryptography for Journalists: Protecting Sources Forever

A Source Protected for Life Needs Encryption for Life

Journalism has a cryptographic problem most of the profession does not talk about. When a reporter promises a source confidentiality, that promise is usually for the source's lifetime, which could be fifty years or more. The Signal message, the PGP email, or the SecureDrop upload that carried the source's identity today has to remain unreadable in 2075. The cryptography has to hold for that long.

If the communication rode on RSA-2048, Curve25519, or any other classical asymmetric primitive, it does not hold for that long. A large cryptographically relevant quantum computer dismantles all of them in polynomial time via Shor's algorithm. The harvest-now-decrypt-later threat is real for journalism because nation-states have the capacity, the motive, and decades of archival capacity to wait out the quantum transition.

This guide is for working journalists, editors, and newsroom IT. It covers what Post Quantum Cryptography looks like in current tools, what is available today, and what to tell sources.

Signal PQXDH: The State of the Art

On September 19, 2023, Signal announced PQXDH (Post-Quantum Extended Diffie-Hellman), a hybrid key agreement that combines X25519 with CRYSTALS-Kyber-1024. This change protects the initial key agreement against harvest-now-decrypt-later attacks on Signal's key exchange. The ratchet still uses classical primitives for individual message forward secrecy, but the bootstrapping to a secure channel is quantum-safe.

For a journalist in 2026, Signal PQXDH is the most widely available post-quantum messaging channel. It is free, auditable, and end-to-end encrypted. For most source communications, Signal is a reasonable default with one important caveat: metadata. Signal knows that two phone numbers exchanged a message. Quantum computing does not change that. Metadata protection has to come from operational security, not crypto.

iMessage PQ3

Apple deployed PQ3 on February 21, 2024, rolling out with iOS 17.4, iPadOS 17.4, macOS 14.4, and watchOS 10.4 in March 2024. It uses Kyber/ML-KEM for post-quantum protection. For sources with Apple devices talking to journalists with Apple devices, iMessage PQ3 is an option. Cross-platform messaging downgrades to SMS which is not encrypted, so know the other party's device environment.

SecureDrop and the Submission Problem

SecureDrop is the open-source whistleblower submission platform developed by the Freedom of the Press Foundation, originally from Aaron Swartz and Kevin Poulsen's DeadDrop. SecureDrop uses Tor for transport, GPG for message encryption, and a multi-hop architecture to protect sources. As of April 2026, SecureDrop's GPG layer is classical (RSA/ECDH). Post-quantum SecureDrop work is on the roadmap but not deployed. Newsrooms using SecureDrop should keep submissions confidential for the lifetime of the source, which requires re-encrypting archives with PQC primitives when a PQC-capable build ships, or storing submissions in PQC-encrypted archives separately.

What Sources Need to Know

Most sources are not cryptographers. They do need to know a small number of things:

• Signal with PQXDH is the best default today for real-time confidential communication.
• Metadata is not protected. Who talks to whom is visible. Operational security (burner numbers, timing, location) is separate from cryptography.
• Email is usually not encrypted. Assume journalists' inboxes are accessible to sophisticated adversaries.
• Physical document handoffs have their own risks but are not subject to HNDL.

Archival Protection for Newsrooms

Once a source's material is in a newsroom's hands, the confidentiality problem does not end. The newsroom holds:

1. Contact logs, interview notes, raw documents, and draft stories.
2. Internal editorial communications.
3. Forensic artifacts (hashes, timestamps) needed to authenticate the material in future.

All of that has to stay confidential for as long as the source is at risk. In practice that means encrypted laptops, encrypted backups, and a Post Quantum Cryptography migration plan for the newsroom's archival store.

Newsroom PQC Checklist

Realistic steps a newsroom can take in 2026:

1. Adopt Signal with PQXDH as the default for source contact. Retrain staff.
2. Audit email usage. Add PGP with a plan to migrate to PQC signatures when tooling stabilizes (current Sequoia PGP and OpenPGP drafts are working on this).
3. Encrypt archival stores of source material with a PQC-capable tool.
4. Coordinate with freedom-of-the-press groups for SecureDrop PQC tracking.
5. Document retention policies and destruction schedules. Deleted data cannot be decrypted.

The Adversary Model

Journalists need to realistic about adversaries. A small-town paper worried about a zoning board lawsuit does not need ML-KEM-1024. A national security reporter covering a nation-state target does. The calculus is proportional to who is looking and how long the story matters. Assume that any story with intelligence-community, foreign-government, or major-corporate consequences is subject to HNDL-capable adversaries.

QNSQY for Newsrooms

QNSQY is a Post Quantum Cryptography data encryption platform used by newsrooms to protect archival source material. Raw interview recordings, document photos, contact databases, and internal editorial systems can be wrapped in ML-KEM hybrid plus ML-DSA signatures. The newsroom's archive stays readable by authorized editors and stays opaque to any future quantum adversary that compromises backups or cloud storage.

Frequently Asked Questions

Is Signal safe for source communications in the quantum era?

Signal adopted PQXDH hybrid (X25519 plus Kyber-1024) on September 19, 2023. The initial key agreement is now protected against harvest-now-decrypt-later attacks. Metadata is a separate problem outside the crypto layer.

Is iMessage protected against HNDL?

Apple deployed PQ3 on February 21, 2024, which uses Kyber/ML-KEM for post-quantum key establishment. It works device to device between Apple platforms. Cross-platform messages fall back to SMS, which is not encrypted.

Is SecureDrop post-quantum?

As of April 2026 SecureDrop's GPG encryption layer is classical. Post-quantum work is on the Freedom of the Press Foundation roadmap. Newsrooms should plan to re-encrypt archival submissions with PQC-capable tools.

What about email?

Most journalist email is not end-to-end encrypted. Adversaries with mail server access can read it. For sensitive source communication, use a PQC-capable messenger instead.

Does encryption protect metadata?

No. Signal, iMessage, and most messaging tools protect message content but not the fact that two parties communicated. Metadata defense is an operational security problem.

Sources

1. Signal PQXDH Blog
2. Apple iMessage PQ3 Announcement
3. Freedom of the Press Foundation SecureDrop
4. NIST FIPS 203 (ML-KEM)
5. NIST FIPS 204 (ML-DSA)

Related Articles

• Harvest Now, Decrypt Later Threat
• HNDL in Plain English
• PQC for Legal: Attorney-Client Privilege
• Why Hybrid Encryption Matters
• How to Implement PQC in Your Organization