Quantum-Safe Cipher Translation
Focus
Focus
What's New in the NetSec Platform

Quantum-Safe Cipher Translation

Table of Contents

Quantum-Safe Cipher Translation

You can use Quantum-Safe Cipher Translation on your Palo Alto Networks Next-Generation Firewall to protect your organization against emerging quantum computing threats while maintaining compatibility with existing applications that use classical encryption. This feature addresses the critical challenge organizations face when upgrading numerous internal and custom applications to post-quantum cryptography, a process that is often time-consuming or impractical due to outdated codebases, resource constraints, or lack of specialized expertise. Your NGFW functions as a translation proxy, terminating quantum-safe connections from modern clients and establishing new connections to your internal applications using the classical encryption methods they currently support. This transparent translation allows you to implement quantum-safe security for external communications while avoiding the immediate need to modify or replace legacy systems that cannot yet support post-quantum cryptography algorithms. You can configure this capability through decryption profiles on your NGFW, selecting from PQC-Standard algorithms like ML-KEM and Kyber, or PQC-Experimental options including Frodo, Bike, and HQC key exchange mechanisms. By implementing Quantum-Safe Cipher Translation, you can future-proof your network security infrastructure and ensure business continuity while gradually transitioning to fully quantum-resistant systems at your own pace.