Not yet fully quantum safe, but IBM leads the industry in PQC readiness. IBM developed the CRYSTALS algorithms that became NIST standards (ML-KEM, ML-DSA) and offers IBM Quantum Safe technology for enterprise migration. However, IBM Cloud services have not completed the transition.
Key Takeaway: IBM Cloud is NOT quantum safe. Scan your IBM Cloud environment with QScout. Evaluate IBM Quantum Safe for enterprise-wide cryptographic discovery. IBM z16 customers should enable hardware PQC acceleration.
IBM Cloud is NOT fully quantum safe today, but IBM is uniquely positioned in the PQC landscape. **Current State:** IBM Cloud services use TLS 1.2/1.3 with classical RSA and ECDSA certificates. IBM Cloud Key Protect and Hyper Protect Crypto Services use classical key wrapping. **PQC Progress:** IBM developed the core algorithms that became NIST PQC standards: - **CRYSTALS-Kyber (ML-KEM)**: Developed by IBM Research. Now NIST FIPS 203. - **CRYSTALS-Dilithium (ML-DSA)**: Developed by IBM Research. Now NIST FIPS 204. - **IBM Quantum Safe**: Enterprise offering for cryptographic discovery and migration planning. - **IBM z16 mainframe**: Hardware-accelerated PQC support for on-premises workloads. **HNDL Risk:** Despite IBM's PQC leadership, IBM Cloud service endpoints still use classical TLS key exchange in most cases. Data intercepted in transit today remains vulnerable to future quantum decryption. **What Organizations Should Do:** Leverage IBM's Quantum Safe tools alongside QScout for comprehensive cryptographic discovery. IBM's z16 hardware PQC support is available for mainframe customers. Cloud-native PQC for IBM Cloud services should be monitored.
| Full Name | IBM Cloud |
| Category | cloud |
| Quantum Vulnerability | IBM Cloud TLS endpoints use classical key exchange vulnerable to quantum attack. IBM developed the NIST PQC standards but cloud service migration is ongoing. |
| NIST Status | IBM developed ML-KEM (FIPS 203) and ML-DSA (FIPS 204). IBM Quantum Safe enterprise tools available. IBM Cloud service-level PQC deployment is in progress. |
| Deprecation Timeline | IBM has not published a firm IBM Cloud PQC migration deadline. IBM's Quantum Safe roadmap provides migration planning tools. |
| Replaced By | IBM Cloud services will migrate to ML-KEM and ML-DSA — the very algorithms IBM developed |
Scan your IBM Cloud environment with QScout. Evaluate IBM Quantum Safe for enterprise-wide cryptographic discovery. IBM z16 customers should enable hardware PQC acceleration.
QScout discovers every instance of IBM Cloud across your infrastructure in 7 days — with zero operational disruption. 72-hour time to first findings.