Post-Quantum Cryptography Comes to Python

The pyca/cryptography library, a key cryptographic module for the Python language, has gained support for post-quantum algorithms. As Bruce Schneier reports, protection against future quantum attacks is now available to the entire Python ecosystem with literally a single pip install command.

The work was carried out with financial support from Germany's Sovereign Tech Agency. Two primitives standardized by the American institute NIST have been added to the library: ML-KEM — a key-agreement (key-establishment) mechanism, and ML-DSA — a digital signature algorithm. It is precisely asymmetric cryptography like RSA that is vulnerable to quantum computing, whereas symmetric ciphers such as AES are not seriously affected by quantum algorithms.

Why Now

Schneier emphasizes what seems at first glance a paradoxical logic: it's worth tackling the transition precisely because there's no emergency. Quantum computers powerful enough to break today's asymmetric schemes don't yet exist. But migrating to new algorithms is not a quick process, and it's wiser to do it ahead of time, at a calm pace, rather than in a state of panic once the threat has become real.

The second argument is so-called crypto agility. By adopting support for post-quantum primitives today, developers get their systems used to the idea that cryptographic algorithms can be swapped out without a painful overhaul of the entire architecture. This is a useful property in its own right, regardless of exactly when practical quantum machines appear.

The arrival of post-quantum primitives in one of the most widely used cryptographic libraries lowers the barrier to entry for thousands of projects: developers no longer need to hunt for third-party experimental implementations or wrestle with low-level code themselves. NIST-standardized algorithms are now available through a familiar and well-supported tool.

Source: Schneier on Security