Is post-quantum cryptography hype?
The threat is not hype, but much of the marketing around it is. The facts are solid: NIST published final standards in August 2024, browsers and large cloud providers already use hybrid post-quantum key exchange, and the EU has a coordinated roadmap with dates. What is uncertain is when a capable quantum computer will exist, and that uncertainty is exactly why planning beats waiting: changing cryptography across a company takes years. The hype lies in products that claim to make you immune to quantum attacks, in countdown clocks, and in pressure to buy hardware you do not need. A sober position for most mid-sized companies: no emergency spending, but an inventory this year, post-quantum questions in every new purchase, updates that switch on hybrid key exchange where vendors offer it, and priority for data that must stay secret for a long time. That costs little and avoids a rushed, expensive migration later.