Vietnam Races to Master Post-Quantum Cryptography Before the Threat Arrives

A sufficiently powerful quantum computer would not just weaken today's encryption - it would dismantle it outright. RSA and elliptic-curve cryptography (ECC), the mathematical backbone securing everything from banking transactions to classified government communications, rely on problems that classical computers cannot solve in any practical timeframe. Quantum algorithms, particularly Shor's algorithm, threaten to solve those same problems efficiently, rendering decades of cryptographic infrastructure obsolete almost overnight.

The Hidden Danger of "Harvest Now, Decrypt Later"

The most immediate risk is not a quantum computer breaking encryption tomorrow. It is the possibility that adversaries are already collecting encrypted data today, storing it, and waiting for quantum decryption capability to catch up. This strategy, often called "collect first, decrypt later," turns any sensitive data with long-term value - state secrets, medical records, intellectual property, diplomatic cables - into a liability the moment it is intercepted, regardless of when the decryption key becomes breakable. For information that must remain confidential for ten, twenty, or fifty years, the quantum threat is already active, even though large-scale quantum computers do not yet exist.

Standardization Is Not the Same as Mastery

International efforts to respond have accelerated. The U.S. National Institute of Standards and Technology (NIST) has published post-quantum cryptography standards, including FIPS 203, 204, and 205, with further algorithms such as HQC and FN-DSA expected in the coming years. These frameworks offer a shared starting point, but adopting a published standard is fundamentally different from controlling the underlying technology. Genuine mastery requires command of four interlocking layers: the mathematical design and security proofs behind an algorithm, the cryptanalysis needed to probe its weaknesses, the secure hardware and software implementation that resists real-world attacks, and the standardization and testing processes that validate it for deployment. A nation that only implements someone else's algorithm, without the capacity to analyze, break, rebuild, and certify it independently, remains dependent at the moment it matters most.

Vietnam's Approach: Building From Theory to Product

Vietnam's Government Cipher Committee has pursued exactly that fuller path, developing its own post-quantum components rather than simply importing finished algorithms. Its work includes a hash-based digital signature scheme known as HB-PQSign, built on a carefully adapted version of the SPHINCS+ architecture underlying FIPS 205, with independently controlled parameters, reference implementations, and defenses against side-channel attacks. It has also developed a Hybrid ML-KEM key encapsulation mechanism, which pairs the post-quantum ML-KEM algorithm (FIPS 203) with conventional ECC or RSA methods. This hybrid design matters because ML-KEM, despite its promise, is still a young scheme - the 2024 KyberSlash vulnerability demonstrated that even standardized post-quantum algorithms can carry implementation flaws. By requiring an attacker to break both the classical and post-quantum components simultaneously, the hybrid model offers a more resilient bridge during the transition period.

Proof, Parameters, and the Road Ahead

Beyond algorithm design, the Committee has worked to independently verify security proofs in the Quantum Random Oracle Model (QROM), using techniques such as Fiat-Shamir with Abort, the Fujisaki-Okamoto transformation, and Measure-and-Reprogram arguments to confirm that published algorithms contain no exploitable mathematical weaknesses. It has also built its own cryptographic parameter sets for HB-PQSign, Hybrid ML-KEM, and a lattice-based signature scheme called ML-PQSign, tailored for compatibility with national infrastructure. In October 2026, the Committee presented draft national technical standards for civilian post-quantum cryptography in Hanoi, opening the specifications to domestic and international expert review before practical deployment.

Remaining Obstacles

Significant challenges persist. Mastering post-quantum cryptography demands rare expertise spanning advanced algebra, lattice theory, coding theory, and quantum computing - skills in short supply even among technologically advanced nations. Systems must also remain "cryptographically agile," able to swap algorithms and parameters as new standards emerge or vulnerabilities surface, without breaking compatibility across existing software and devices. Practical deployment introduces further friction: post-quantum keys and signatures tend to be considerably larger than their classical counterparts, straining public key infrastructure and constrained devices. Underlying all of this is the human resource gap - training an independent cryptographic design expert takes years, and competition for such talent from industry and abroad is intense.

These are not problems that can be outsourced. Cryptographic sovereignty cannot be purchased or borrowed; it must be built through sustained investment in people, research, and independent verification. As quantum computing continues its advance, the nations and institutions that control the full chain - from mathematical proof to deployed hardware - will be the ones genuinely prepared for what comes next.