The Quantum Security and Post-Quantum Cryptography Company Landscape: Who Is Building the Chips and

[NightOwl94]

The sleeper category is cryptographic agility, not the algorithms themselves. Today's lattice schemes look solid, but a future cryptanalytic result, implementation bug or side-channel issue could force another migration, so the winners may be the firms that let enterprises swap primitives without rebuilding fleets of devices. That is less glamorous than a chip with a quantum logo, but it is probably where CIOs will spend the money. PQShield, ISARA, Keyfactor and the bigger PKI vendors all seem to understand that the migration is the product.

[Vector14]

Crypto is where the marketing gets loudest and the engineering gets thinnest. A testnet announcement is not a migration plan, and swapping signatures on a blockchain is vastly harder than adding a hybrid key exchange to TLS because you have consensus, wallet tooling, hardware wallets and social recovery to worry about. Ethereum at least has a public migration proposal, while plenty of chains seem to treat "quantum resistant" as a press-release adjective.