Patero CryptoQoR™ for RHEL Certified

Rather than replacing existing algorithms with comparatively less-studied post-quantum alternatives, combining both a traditional
algorithm and a post-quantum algorithm improves security now and protects against quantum-based attacks later. If done
correctly, the overall system’s security is lower bounded by the stronger of the two cryptosystems composing the hybrid system.
In other words, even if the PQC algorithm is subsequently identified as flawed, the security offered by

Once CRQCs come online, they will break today’s encryption in mere moments; however, relying only on newer quantum-resilient
algorithms that are largely field-untested also presents a risk if deployed today.

Hybrid post-quantum cryptography uses both to secure data in transit. To decrypt information protected by hybrid
post-quantum technology requires breaking both cryptography used today AND breaking a quantum-resistant algorithm.
Information will always be at least as secure as the stronger algorithm. More importantly, the work required to break both forms of
cryptography would likely deter most cyber-attackers.

For gov’t agencies, industrial control system (ICS) operators, and other organizations where classified information is critical,
hybrid PQE enhances today’s encryption without introducing risk. In other words, customers are not trading one risk for another.
Instead, they have a viable option that protects against today’s advanced attacks and provides a viable PQE migration path.

Definition: The term crypto-agility typically refers to flexible system design, enabling customers to immediately adopt new
cryptographic schemes with minimal impact on operations.

Crypto-agility is essential to customers, especially those operating critical infrastructure composed of assets with long life cycles,
to futureproof security architectures as attack vectors evolve. Solutions that can adapt as NIST standardizes quantum-resilient

Patero QoR enables a secure communications architecture or mesh where Patero endpoints only communicate with other Patero-authenticated endpoints. Endpoints are re-authenticated continuously to ensure both forward secrecy and trust.