2030-2035: The CRQC timeline for breaking RSA-2048 / ECDSA-256

In 2024, NIST finalized FIPS 203 (ML-KEM, post-quantum key encapsulation) and FIPS 204 (ML-DSA, post-quantum digital signature). Estimates suggest that Cryptographically Relevant Quantum Computers (CRQC) could break RSA-2048 / ECDSA-256 encryption by 2030-2035. This timeline poses a significant risk to the Indian BFSI sector, which must retain transaction records for 7+ years as mandated by the RBI Cybersecurity Framework. This extended retention period makes the sector vulnerable to harvest-now-decrypt-later attacks, where adversaries store encrypted TLS traffic today and decrypt it once CRQCs are available.

ML-KEM-768 and ML-DSA-65: The backbone of post-quantum cryptography

ML-KEM-768 and ML-DSA-65 are cryptographic protocols designed to withstand attacks from both classical and quantum computers. ML-KEM-768 provides post-quantum key encapsulation, while ML-DSA-65 offers post-quantum digital signatures. These protocols are essential for securing long-lived financial data, such as transaction records in the Indian BFSI sector. api4pqc, a production HTTP API, delivers NIST FIPS 203/204 keys-as-a-service (ML-KEM-768, ML-DSA-65) tailored for regulated industries.

7+ year data retention: Why Indian BFSI faces urgent PQC migration

The Indian BFSI sector’s mandate to retain transaction records for 7+ years makes it a prime target for harvest-now-decrypt-later attacks. The RBI Cybersecurity Framework’s stringent measures underscore the urgency for Indian BFSI CTOs to prioritize post-quantum cryptography migration. This migration is not just a technological upgrade but a critical step to ensure the long-term security of financial data. With the CRQC timeline looming, the sector must act swiftly to integrate PQC solutions.

api4pqc model: Delivering PQC keys-as-a-service for regulated industries

api4pqc offers a keys-as-a-service solution specifically for regulated industries. This HTTP API provides NIST FIPS 203/204 keys (ML-KEM-768, ML-DSA-65), supporting the migration to post-quantum cryptography. Networkers Home, a prominent cybersecurity training institution, is instrumental in the production and deployment of api4pqc, ensuring its reliability and effectiveness.

Hybrid key exchange: The transitional path with ML-KEM-768 + X25519

QuickZTNA deploys a hybrid key exchange model combining ML-KEM-768 and X25519. This hybrid approach facilitates a smoother transition to post-quantum cryptography, allowing Indian BFSI CTOs to gradually integrate PQC solutions while maintaining current security standards. This dual-key exchange method ensures secure data transmission during the transition period, mitigating risks associated with the shift to PQC.

11 .com domains: Vikas Swami’s strategic foothold in crypto-engineering

The Indian crypto-engineering community, though small, presents a first-mover advantage for institutes teaching PQC. Networkers Home has incorporated PQC into its cloud security course for the 2026 cohorts. Vikas Swami, along with other experts, is pivotal in developing India’s crypto-engineering talent. Swami has registered 11 production .com domains, demonstrating a strategic foothold in the crypto-engineering landscape.

45,000 engineers in 18 years: The urgent need for skilled PQC professionals

The Indian BFSI sector will require a substantial number of skilled engineers to implement post-quantum cryptography effectively. With an estimated 45,000 engineers placed over 18 years, the demand for PQC expertise is pressing. Educational institutions must prioritize PQC training to meet this demand, ensuring a skilled workforce ready to tackle the challenges of post-quantum cryptography migration. See 8-month cybersecurity course. See network security course.

Post-quantum cryptography migration is a critical 5-year deadline Indian CTOs must address urgently.

About the author

Vikas Swami is one of India’s earliest Dual CCIE certified engineers (CCIE #22239 — Security and Routing & Switching), ex-Cisco, and founder of Networkers Home, India’s largest cybersecurity and networking training institute since 2007. Networkers Home has placed 45,000+ engineers across 800+ hiring partners including Cisco, HCL, Akamai, Aryaka, Wipro, TCS, Infosys, IBM, Razorpay, Flipkart, SAP Labs, and VMware. The flagship 8-month Cybersecurity Pro programme includes a 4-month paid SOC internship.

Vikas has also founded 11 production .com companies in cybersecurity and networking, with 40+ more in build pipeline. Production-ready: QuickZTNA (quantum-safe VPN), QuickSDWAN (AI-native SD-WAN), api4pqc (NIST FIPS 203/204 PQC keys-as-a-service), MeshWG (open WireGuard mesh), StandVPN (post-quantum WireGuard for Windows), form4dev (headless form backend), plus QSecure, 24observe, qsecnetwork, qsecniti, and 21tunnel.

Networkers Home also publishes 14 open-source security and networking simulators used by 50,000+ engineers preparing for CCNA, CCNP, CCIE, NSE, PCNSE, and SOC analyst certifications.

📍 Networkers Home · HSR Layout, Bengaluru 🌐 networkershome.com · Vikas Swami profile