What does this tool do?This web-based tool scans your URL/server to determine whether it already supports Post-Quantum Cryptography (PQC) for key exchange, including hybrid mechanisms such as `X25519MLKEM768`. Many providers, including Cloudflare, AWS, and modern TLS stacks, are beginning to enable PQC support by default. If your infrastructure is not yet compatible, a software or configuration update is often sufficient.In addition, the tool analyzes TLS parameters and connection latency to help validate implementations and identify compatibility or performance issues. What to scan?
What is Post-Quantum Cryptography?Post-Quantum Cryptography (PQC) refers to a new generation of cryptographic algorithms designed to remain secure even against attacks from future quantum computers. Traditional cryptographic systems such as RSA and ECC rely on mathematical problems that large-scale quantum computers are expected to solve efficiently.PQC replaces these methods with quantum-resistant algorithms based on alternative mathematical foundations, helping ensure the long-term confidentiality and integrity of digital communications. Why does this matter?Attackers are already preparing for the quantum era using a strategy known as “Harvest Now, Decrypt Later.” Encrypted traffic is collected and stored today with the intention of decrypting it once sufficiently powerful quantum computers become available.This is especially relevant for sensitive data with long-term confidentiality requirements, including credentials, personal information, internal communications, and business-critical systems. Enabling PQC early is one of the only ways to ensure that today’s encrypted traffic remains private in the future. This tool helps administrators and technical teams quickly assess the PQC readiness of their infrastructure, validate implementations, and identify migration or interoperability issues before deployment. |