The short version
- Focus
- Post-quantum crypto, QKD & security.
- Best for
- Security & cryptography backgrounds.
- Estimated timeline
- 18-24 months part-time.
- First step
- Master classical cryptography first.
- Last step
- Apply for cryptography and security roles.
It is grounded in classical security and adds the quantum layer on top.
A quantum cryptography specialist focuses on security: the algorithms that resist quantum attack, the protocols, and the migration of real systems. A quantum developer writes general quantum software across frameworks and algorithms. The two meet at Shor's and Grover's algorithms, which the specialist studies as threats. If you want the broad software foundation first, see the quantum developer guide.
Key skills you will build
Step 01 · Classical crypto Master classical cryptography first
Everything in this field is a response to classical cryptography, so start there. Understand symmetric ciphers like AES, public-key systems like RSA and elliptic-curve cryptography, hash functions, digital signatures, and the key-exchange protocols that secure the internet today. You cannot reason about quantum threats or post-quantum replacements without knowing exactly what they are protecting and replacing.
Where to learn it
Step 02 · The quantum threat Understand why quantum breaks current crypto
The whole field exists because of two algorithms. Shor's algorithm factors integers and computes discrete logarithms efficiently, which breaks RSA and elliptic-curve cryptography outright. Grover's algorithm gives a quadratic speedup against symmetric keys and hashes, effectively halving their security. Learn precisely what each one threatens, and what "harvest now, decrypt later" means for data you encrypt today.
Where to learn it
Step 03 · Post-quantum crypto Learn post-quantum cryptography
Post-quantum cryptography (PQC) replaces vulnerable algorithms with ones believed secure against quantum computers, running on classical hardware. Lattice-based schemes dominate the standards. Study the families, the hardness assumptions behind them, and why lattices became the leading bet for both encryption and signatures.
Where to learn it
Step 04 · NIST standards Know the NIST post-quantum standards
NIST has standardized the first algorithms the industry will adopt. Learn ML-KEM (Kyber) for key encapsulation, ML-DSA (Dilithium) for digital signatures, and SLH-DSA (SPHINCS+) as a hash-based signature backup, and keep an eye on FN-DSA (Falcon), which is still a draft standard (FIPS 206) under review. Understand their parameter sets, performance trade-offs, and where each one fits. These names will be on every job description in the field.
Where to learn it
Step 05 · Implementation Get hands-on with PQC libraries
Specialists implement and integrate, not just read specs. Get hands-on with the Open Quantum Safe project and its liboqs library, which provides the NIST algorithms with bindings for common languages. Build a small client and server that negotiate a post-quantum key exchange, and learn how PQC slots into TLS and existing protocols. Working code is what proves you can deliver a migration.
Where to learn it
Step 06 · QKD Learn quantum key distribution
Quantum key distribution (QKD) takes the opposite approach to PQC: instead of hard maths, it uses the laws of physics to detect eavesdropping. Study the BB84 protocol, how the no-cloning theorem guarantees security, and the role of quantum repeaters and the quantum internet in scaling QKD across distance. Implement a QKD protocol in code to make the theory concrete.
Where to learn it
Step 07 · Network security Apply it to real network security
A security specialist works in the context of protocols and infrastructure. Understand where cryptography lives in TLS, VPNs, PKI, and code signing, and how secure communication is established and maintained. Learn the concept of crypto-agility: designing systems so the underlying algorithms can be swapped out as standards evolve. This is the practical surface where PQC migration actually happens.
Where to learn it
Step 08 · Migration & risk Plan migration and assess risk
The defining task of the next decade is migrating organizations to quantum-safe cryptography. Learn to inventory cryptographic assets, assess which data has a long enough lifetime to be at risk, prioritize systems, and build a phased migration roadmap. Governance, compliance, and risk communication matter as much as the algorithms here. This strategic layer is what makes a specialist valuable to a business.
Where to learn it
Step 09 · Get hired Apply for cryptography and security roles
Target post-quantum cryptography engineer, security architect, and cryptography researcher roles at security vendors, financial institutions, governments, and consultancies. Many positions value a security or cryptography background plus demonstrated PQC and QKD knowledge. Prepare for interviews that probe both classical security depth and quantum specifics, and review compensation before negotiating.
Where to learn it