# What should we ask vendors about post-quantum readiness?

Ask questions that have verifiable answers. Which post-quantum or hybrid algorithms does the product support today, by name, such as X25519MLKEM768 for TLS or ML-DSA for signatures, and from which version? If none yet, in which release and by when? Can the algorithms be changed by configuration or update, without replacing hardware? Which cryptographic library does the product use, and who maintains it? Does the hardware, such as a firewall, a hardware security module or a controller, have the capacity for larger keys, or will it need replacing? How will the vendor sign its own updates once signature algorithms change? Will the product keep working with clients that only support classical algorithms during the transition? Ask for the answers in writing, with dates. Be careful with answers that promise immunity to quantum attacks or that only talk about symmetric encryption: they avoid the real question. A vendor that cannot answer is a dependency to plan around, and its answer belongs in your inventory.

FAQ: [Post-quantum cryptography](https://netsenx.com/en/faq/pqc) · https://netsenx.com/en/faq/what-to-ask-vendors-about-post-quantum-readiness

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/features
- https://netsenx.com/en/blog/2026-10-27_harvest-now-decrypt-later

## Related questions

- [What is a quantum computer?](https://netsenx.com/en/faq/what-is-a-quantum-computer)
- [Why are quantum computers a threat to encryption?](https://netsenx.com/en/faq/why-are-quantum-computers-a-threat-to-encryption)
- [How does Shor's algorithm break RSA and ECC?](https://netsenx.com/en/faq/how-does-shors-algorithm-break-rsa-and-elliptic-curves)
- [What does Grover's algorithm mean for AES?](https://netsenx.com/en/faq/what-does-grovers-algorithm-mean-for-aes)
- [When will a quantum computer break RSA?](https://netsenx.com/en/faq/when-will-a-quantum-computer-break-encryption)