Post-Quantum Cryptography vs Quantum Communication: What's the Difference?

The terms "post-quantum cryptography" and "quantum communication" are both part of the quantum security conversation, but they solve completely different problems using completely different approaches. Confusing them leads to misunderstanding the actual state of data security. Here's a clear breakdown.

Post-Quantum Cryptography (PQC): Better Maths, Classical Hardware

Post-quantum cryptography is classical cryptography — it runs on ordinary computers using ordinary software. The "post-quantum" refers to the fact that the underlying mathematical problems are believed to be resistant to attacks by quantum computers.

Today's public-key cryptography (RSA, Elliptic Curve) is based on the hardness of factoring large numbers and discrete logarithm problems. Quantum computers running Shor's algorithm can solve these in polynomial time, making current public-key systems theoretically vulnerable.

PQC replaces those with new mathematical problems that quantum computers cannot efficiently solve:

• Lattice-based cryptography (CRYSTALS-Kyber, CRYSTALS-Dilithium) — based on the hardness of finding short vectors in high-dimensional lattices
• Hash-based signatures (SPHINCS+) — based purely on the collision resistance of hash functions
• Code-based cryptography (Classic McEliece) — based on decoding random linear codes

Key point: PQC requires no quantum hardware. It can be deployed on your existing laptop, server, or smartphone today as a software update. NIST standardised the first PQC algorithms in 2024, and adoption is already underway in TLS and SSH.

Quantum Communication (QKD): Physics, Not Maths

Quantum communication doesn't try to find harder maths problems. Instead, it uses the physical laws of quantum mechanics to make certain attacks impossible at the physics level. Quantum Key Distribution (QKD) distributes encryption keys using single photons. Any attempt to intercept them disturbs their quantum state, revealing the eavesdropper.

Key point: QKD requires specialised quantum hardware — single-photon emitters and detectors, quantum-safe optical fibres, and precise timing equipment. It cannot be deployed as a software update. It secures the key exchange channel, not the data encryption itself.

Side-by-Side Comparison

Property	Post-Quantum Cryptography	Quantum Communication (QKD)
Hardware required	Standard computers	Quantum optical hardware
Security basis	Mathematical hardness	Laws of physics
Deployable today?	Yes (software update)	Limited (specialist hardware)
Protects against	Future quantum computers	All eavesdropping (classical + quantum)
Standardised?	Yes (NIST 2024)	Partial (ETSI standards)
Cost	Near-zero (software)	High (specialist equipment)

Which Should You Care About?

For most organisations today: Post-quantum cryptography is immediately relevant. If you transmit data that will still be sensitive in 10+ years, start planning your migration to PQC-based TLS and key exchange now. The "harvest now, decrypt later" threat is real.

Quantum communication is relevant for critical infrastructure, national security, and financial sector applications where physical eavesdropping by sophisticated adversaries is a plausible threat model. For everyday file sharing, the gap between current security (TLS 1.3 + AES-256, as used by TiniDrop) and quantum-secured channels is far wider than any practical threat requires closing today.

Both technologies represent the future of data security. Understanding the distinction helps you prioritise correctly — and avoids spending resources on solutions designed for threat models that don't apply to your situation.