首頁 > 市場調查報告書 > 通訊

IT安全性人工智能量子運算

市場調查報告書

商品編碼

2044491

全球後量子密碼市場（2026-2036 年）

The Global Post-Quantum Cryptography Market 2026-2036

出版日期: 2026年05月22日 | 出版商:

Future Markets, Inc. | 英文 130 Pages, 26 Tables, 39 Figures | 訂單完成後即時交付

價格

簡介目錄圖表

後量子密碼學（PQC）旨在應對本世代最重大的安全變革：取代公開金鑰加密的挑戰。隨著功能強大的量子電腦的出現，公鑰密碼學終將過時。如今幾乎所有數位通訊所依賴的演算法——例如RSA、橢圓曲線密碼學和Diffie-Hellman密鑰交換——都基於一些數學難題，而這些難題可以透過運行在密碼學實用量子電腦（CRQC）上的Shor演算法高效地求解。許多觀察家估計，這類機器的出現時間（被稱為「Q日」）將在2030年至2040年之間，但這項預測仍存在相當大的不確定性。 PQC演算法旨在抵禦經典攻擊和量子攻擊，同時能夠在傳統硬體上運行，這將實現廣泛的、軟體主導的過渡。

隨著美國國家標準與技術研究院 (NIST) 完成標準化流程，該市場迎來了一個轉捩點。該流程最終促成了 ML-KEM、ML-DSA 和 SLH-DSA 於 2024 年被指定為聯邦資訊處理標準 (FIPS)。這項標準化將 PQC 從一項基於研究的技術轉變為可採購且強制性的技術，為政府和受監管行業提供了具體的轉型目標。

該市場的一個關鍵特徵是，演算法本身的經濟價值雖小，但遷移到這些演算法所帶來的經濟價值卻十分巨大。 NIST 標準編譯後的程式碼只有幾百 KB，但要將其部署到歷經數十年建置的加密基礎設施（包括協定、應用程式、硬體安全模組、憑證層級、韌體、供應鍊等）中，則需要整個公司投入大量資源。來自 NSA、NIST、ENISA 和領先顧問公司的遷移框架文件都一致認為：在整個過渡期內，服務和整合支出將比底層 PQC 產品的收入高出約 8 到 12 倍。

推動需求的因素包括：美國國家標準與技術研究院 (NIST) 的標準化、政府過渡義務（例如 NSA-CNSA 2.0）、「先收集後解密」對長期儲存資料的威脅、金融、電信和關鍵基礎設施產業的監管，以及對密碼學敏捷性的結構性需求。主要阻礙因素包括：組織慣性、後量子密碼學密鑰長度不斷增加導致的向後相容性問題、熟練人員短缺，以及「量子日」確切時間的不確定性。

銀行業和國防領域將是短期需求的支柱，而嵌入式設備和物聯網遷移預計將在預測期後半段實現最快成長。北美將引領市場，這得益於其最早且最詳細的監管要求，其次是歐洲和亞太地區。包括產品和遷移服務在內的潛在市場總規模預計將從2026年的數十億美元成長到2036年的數百億美元，使PQC成為未來十年網路安全市場的關鍵支柱之一。

《2026-2036年全球後量子密碼市場》報告檢驗了未來十年後量子密碼技術在產品、服務、技術、終端用戶產業和地區等方面的商業機會。隨著量子運算發展到足以破解保護現代數位通訊的公開金鑰加密的階段，全球各組織機構都面臨著緊迫而複雜的轉型。本報告量化了這些機遇，並為供應商、投資者、整合商和安全領導者提供了所需的策略分析。

本報告首先對量子威脅進行定義。具體而言，報告解釋了Shor和Grover演算法、具有密碼學意義的量子計算概念、量子威脅成為現實的「Q日」時間表，以及「先收割後解密」攻擊模型。該模型表明，無論量子威脅何時到來，過渡到量子計算都是一個迫切的問題。報告也說明了後量子密碼學的四大類（基於格、基於雜湊、基於編碼和多元），以及NIST標準化的演算法ML-KEM、ML-DSA、SLH-DSA和FN-DSA，並檢驗了金鑰和簽章長度增加的實際影響。

報告詳細說明了標準和監管環境，涵蓋了NIST流程、FIPS標準、NSA CNSA 2.0、IETF、ETSI、ISO/IEC、ITU以及ENISA、BSI、NCSC和ANSSI等國家級指南。隨後，報告逐層分析了抗量子攻擊的過渡過程，包括密碼發現、密碼敏捷性、混合密碼學、硬體安全模組（HSM）、抗量子攻擊的TLS和PKI、程式碼簽章以及嵌入式系統。報告也提出了一項關鍵發現：過渡服務的收入可達產品收入的8到12倍。

本報告提供全面的市場分析，具體包括促進因素和阻礙因素、SWOT分析、技術成熟度評估、機會評估架構以及細分市場的SWOT分析。該報告還針對銀行、國防、政府、電信、關鍵基礎設施、雲端運算、醫療保健以及汽車/物聯網/製造業等產業制定了相應的轉型方案，並分析了轉型服務市場及其供應商的發展趨勢。該報告對總潛在市場（TAM）進行了詳細的十年預測（2026-2036），並按加密方法、產品類型、最終用戶群體和地區進行了細分，同時提供了保守、基準和樂觀三種情境。區域分析涵蓋北美、歐洲、亞太地區以及世界其他地區。

本報告收錄了42家後量子密碼領域領導者的概況，涵蓋其總部所在地、業務概述、資金籌措狀況以及後量子密碼產品和技術。報告包含大量數據表和圖表，是任何希望了解、進入或投資後量子密碼市場的機構不可或缺的策略資源。

目錄包括：

量子威脅、NIST 的研究結果、轉型為何會成為市場、關鍵預測、促進因素和阻礙因素、區域總結和主要發現。
PQC 指的是傳統公開金鑰加密中的漏洞、Shor 演算法和 Grover 演算法、對稱密碼學和公開金鑰加密的比較、PQC、QKD 和 QRNG 的比較、術語、調查範圍和調查方法。
量子威脅與量子日時間表－與密碼學相關的量子電腦、「先採集後解密」模型、量子日預計時間、長期資料保留風險、硬體藍圖及策略影響
PQC演算法與技術－基於格、基於雜湊、基於編碼、多元和基於同質性的密碼學，效能比較，NIST第四輪，金鑰和簽章長度挑戰
標準和監管狀態 - NIST 流程、FIPS 203/204/205/206、NSA CNSA 2.0、IETF/ETSI/ISO/ITU、國家指南、行業監管機構
抗量子攻擊過渡協定堆疊－密碼發現、密碼敏捷性、混合密碼、硬體安全模組 (HSM)、抗量子攻擊的 TLS/IPsec/VPN/SSH、公鑰基礎設施 (PKI)、程式碼簽章、嵌入式系統和物聯網
PQC產品及服務模式－加密庫、軟體及韌體、支援PQC的瀏覽器、晶片及加速器、HSM及磁帶驅動器、雲端/VPN/PQCaaS、產品市場結構
市場分析與機會評估－促進因素、阻礙因素、淨影響、SWOT分析、服務產品比、技術成熟度、機會架構、終端用戶機會、細分市場SWOT分析
產業特定轉型計畫 - 銀行、國防、政府、電信、關鍵基礎設施、雲端運算和軟體即服務 (SaaS)、醫療保健、汽車/物聯網/製造業，比較摘要
遷移服務與諮詢－市場架構、純顧問公司、系統整合商、雲端供應商服務、專業硬體供應商、託管服務、策略意義
2026-2036年市場預測 - 總潛在市場規模、按加密方法、產品類型、最終用戶群體和地區分類的預測、過渡服務預測和成長情景
區域分析－北美、歐洲、亞太地區及世界其他地區：區域預測和市場佔有率趨勢。
公司簡介 - 42 家公司簡介

本報告重點介紹了以下 42 家在後量子密碼市場運營的公司：Quantum Inc.、Aires Applied Quantum Technology (AAT)、Atos、BTQ Technologies、中國電信量子集團、思科系統、Cloudflare、Crypto4A Technologies、Crypto Quantique、CryptoNext Security、DigiCert、Entust、MvolRAution、Fet、MvolRAution、FetCert、Uamp、MvolRAution、Ij、MvolRAution、SjTS、UberCert、Uamp、MvolRAution、Ivo、MvolRAution、SjTS、Sapk、Uber、MvolRAution） Security、微軟、Patero、Post-Quantum (PQ Solutions)、PQSecure Technologies、PQShield、Project Eleven、QAN Platform、QuantiCor Security、Quantropi、Quantum Secure Encryption Corp. (QSE)、QuBalt 等。

Post-quantum cryptography (PQC) addresses the most consequential security transition in a generation: the replacement of public-key cryptography that a sufficiently powerful quantum computer would render obsolete. The algorithms securing virtually all digital communication today - RSA, elliptic-curve cryptography, and Diffie-Hellman key exchange - rest on mathematical problems that Shor's algorithm, running on a cryptographically relevant quantum computer (CRQC), can solve efficiently. The arrival of such a machine, termed "Q-Day," is estimated by most observers to fall between 2030 and 2040, though with considerable uncertainty. PQC algorithms are designed to resist both classical and quantum attack while running on conventional hardware, which makes broad, software-driven migration possible.

The market reached an inflection point with the conclusion of the US National Institute of Standards and Technology (NIST) standardization process, which finalized ML-KEM, ML-DSA, and SLH-DSA as Federal Information Processing Standards in 2024. Standardization converted PQC from a research field into a procurable, mandatable technology and gave governments and regulated industries a concrete migration target.

A defining feature of the market is that the algorithms themselves are a small economic prize, while the migration to them is a very large one. The NIST standards compile to a few hundred kilobytes of code; deploying them across decades of accumulated cryptographic infrastructure - protocols, applications, hardware security modules, certificate hierarchies, firmware, and supply chains - is an enterprise-wide undertaking. Migration framework documents from NSA, NIST, ENISA, and major consultancies converge on a consistent estimate: services and integration spending will exceed underlying PQC product revenue by a factor of roughly 8–12× across the migration window.

Demand is driven by NIST standardization, government migration mandates such as NSA CNSA 2.0, the harvest-now-decrypt-later threat to long-lived data, sector regulation in finance, telecommunications and critical infrastructure, and the structural need for crypto-agility. The principal restraints are organizational inertia, backward-compatibility concerns arising from larger post-quantum key sizes, scarce specialist talent, and uncertainty over Q-Day's exact timing.

Banking and defence anchor near-term demand; embedded and IoT migration grows fastest later in the forecast. North America leads the market, supported by the earliest and most prescriptive mandates, with Europe and Asia-Pacific following. The total addressable market - products plus migration services - is projected to expand from a few billion dollars in 2026 to several tens of billions by 2036, making PQC one of the defining cybersecurity markets of the coming decade.

The Global Post-Quantum Cryptography Market 2026–2036 examines the post-quantum cryptography opportunity across products, services, technologies, end-use industries, and regions over a ten-year horizon. As quantum computing advances toward the point at which it can break the public-key cryptography securing modern digital communication, organizations worldwide face an urgent and complex migration. This report quantifies that opportunity and provides the strategic analysis needed by vendors, investors, integrators, and security leaders.

The report opens by establishing the quantum threat - Shor's and Grover's algorithms, the concept of a cryptographically relevant quantum computer, the Q-Day timeline, and the harvest-now-decrypt-later attack model that makes migration urgent regardless of when Q-Day arrives. It examines the four families of post-quantum cryptography - lattice-based, hash-based, code-based, and multivariate - and the NIST-standardized algorithms ML-KEM, ML-DSA, SLH-DSA, and FN-DSA, including the practical consequences of their larger key and signature sizes.

A detailed treatment of the standards and regulatory landscape covers the NIST process, the FIPS standards, NSA CNSA 2.0, the IETF, ETSI, ISO/IEC and ITU bodies, and national guidance from ENISA, BSI, NCSC, and ANSSI. The report then analyses the quantum-safe migration stack layer by layer - cryptographic discovery, crypto-agility, hybrid cryptography, HSMs, quantum-safe TLS and PKI, code signing, and embedded systems - and the central finding that migration services outweigh product revenue by 8–12×.

The report provides extensive market analysis: drivers and restraints, SWOT analysis, a technology-readiness assessment, an opportunity-assessment framework, and per-segment SWOTs. It develops industry-specific migration programmes for banking, defence, government, telecommunications, critical infrastructure, cloud, healthcare, and automotive/IoT/manufacturing, and analyses the migration-services market and its provider landscape. Granular ten-year forecasts (2026–2036) are provided for the total addressable market and segmented by cryptographic approach, product category, end-user group, and region, with conservative, base, and optimistic scenarios. A regional analysis covers North America, Europe, Asia-Pacific, and the Rest of World.

The report includes profiles of 42 key companies active in post-quantum cryptography, covering their country, business description, funding, and PQC products and technology. Supported throughout by data tables and figures, the report is an essential strategic resource for any organization seeking to understand, enter, or invest in the post-quantum cryptography market.

Contents include:

Quantum threat, NIST outcomes, why migration is the market, headline forecast, drivers and restraints, regional summary, principal findings
What PQC is, classical public-key vulnerabilities, Shor's and Grover's algorithms, symmetric vs. public-key cryptography, PQC vs. QKD vs. QRNG, terminology, scope and methodology
The Quantum Threat and Q-Day Timeline - cryptographically relevant quantum computers, harvest-now-decrypt-later, Q-Day estimates, long-lived data risk, hardware roadmaps, strategic implications
PQC Algorithms and Technology - lattice-based, hash-based, code-based, multivariate and isogeny-based cryptography, performance comparison, NIST Round 4, key and signature size implications
Standards and the Regulatory Landscape - NIST process, FIPS 203/204/205/206, NSA CNSA 2.0, IETF/ETSI/ISO/ITU, national guidance, sector regulators
The Quantum-Safe Migration Stack - cryptographic discovery, crypto-agility, hybrid cryptography, HSMs, quantum-safe TLS/IPsec/VPN/SSH, PKI, code signing, embedded and IoT
PQC Products and Delivery Models - cryptographic libraries, software and firmware, PQC-enabled browsers, chips and accelerators, HSMs and tape drives, cloud/VPN/PQCaaS, product market structure
Market Analysis and Opportunity Assessment - drivers, restraints, net impact, SWOT, services-to-product ratio, technology readiness, opportunity framework, end-use opportunities, per-segment SWOTs
Industry-Specific Migration Programs - banking, defence, government, telecommunications, critical infrastructure, cloud and SaaS, healthcare, automotive/IoT/manufacturing, comparative summary
Migration Services and Consulting - market structure, pure-play consultancies, systems integrators, cloud-vendor services, specialty hardware vendors, managed services, strategic implications
Market Forecasts 2026–2036 - total addressable market, forecasts by cryptographic approach, product category, end-user group, and region, migration services forecast, growth scenarios
Regional Analysis - North America, Europe, Asia-Pacific, Rest of World, regional forecast and share dynamics
Company Profiles - 42 company profiles

The report profiles the following 42 companies active in the post-quantum cryptography market: 01 Quantum Inc., Aires Applied Quantum Technology (AAT), Atos, BTQ Technologies, China Telecom Quantum Group, Cisco Systems, Cloudflare, Crypto4A Technologies, Crypto Quantique, CryptoNext Security, DigiCert, Entrust, evolutionQ, Google, IBM, Infineon Technologies, Intel, ISARA, KETS Quantum Security, Microsoft, Patero, Post-Quantum (PQ Solutions), PQSecure Technologies, PQShield, Project Eleven, QAN Platform, QuantiCor Security, Quantropi, Quantum Secure Encryption Corp. (QSE), QuBalt and more......

1 EXECUTIVE SUMMARY

1.1 The Quantum Threat in Brief
1.2 NIST Standardization Outcomes
1.3 Why Migration Is the Market
1.4 Headline Market Forecast
1.5 Drivers and Restraints
1.6 Regional Summary
1.7 Principal Findings and Strategic Recommendations

2 INTRODUCTION

2.1 What Is Post-Quantum Cryptography?
2.2 Classical Public-Key Cryptography and Its Vulnerabilities
2.3 Shor's and Grover's Algorithms
2.4 Symmetric vs. Public-Key Cryptography in a Quantum World
2.5 PQC vs. QKD vs. QRNG
2.6 Cryptographic Terminology
2.7 Report Scope, Segmentation, and Methodology

3 THE QUANTUM THREAT AND Q-DAY TIMELINE

3.1 Cryptographically Relevant Quantum Computers
3.2 The Harvest-Now-Decrypt-Later Model
3.3 Q-Day Estimates and Uncertainty
3.4 Long-Lived Data and Retention Risk
3.5 Quantum Hardware Roadmaps
3.6 Strategic Implications

4 PQC ALGORITHMS AND TECHNOLOGY

4.1 Lattice-Based Cryptography
4.2 Hash-Based Cryptography
4.3 Code-Based Cryptography
4.4 Multivariate and Isogeny-Based Cryptography
4.5 Algorithm Performance Comparison
4.6 NIST Round 4 and Signature Diversity
4.7 Key and Signature Size Implications

5 STANDARDS AND THE REGULATORY LANDSCAPE

5.1 NIST Standardization Process
5.2 The FIPS 203/204/205/206 Standards
5.3 NSA CNSA 2.0
5.4 IETF, ETSI, ISO/IEC, ITU
5.5 National Guidance (ENISA, BSI, NCSC, ANSSI)
5.6 Sector Regulators

6 THE QUANTUM-SAFE MIGRATION STACK

6.1 Cryptographic Inventory and Discovery
6.2 Crypto-Agility Frameworks
6.3 Hybrid Cryptography
6.4 HSMs with PQC
6.5 Quantum-Safe TLS, IPsec, VPN, and SSH
6.6 Quantum-Safe PKI
6.7 Quantum-Safe Code Signing
6.8 Embedded Systems and IoT

7 PQC PRODUCTS AND DELIVERY MODELS

7.1 Cryptographic Libraries
7.2 PQC Software and Firmware
7.3 PQC-Enabled Browsers
7.4 PQC Chips and Hardware Accelerators
7.5 PQC-Enabled HSMs and Tape Drives
7.6 PQC Cloud, VPN, and PQC-as-a-Service
7.7 Product Market Structure and Strategic Positioning

8 MARKET ANALYSIS AND OPPORTUNITY ASSESSMENT

8.1 Market Drivers
8.2 Market Restraints
8.3 Net Impact of Drivers and Restraints
8.4 SWOT Analysis: The PQC Market
8.5 The Services-to-Product Ratio
8.6 Technology Readiness Assessment
8.7 The Opportunity-Assessment Framework
8.8 End-Use Market Opportunities
8.9 Per-Segment SWOT Analyses

9 INDUSTRY-SPECIFIC MIGRATION PROGRAMS

9.1 Banking and Financial Services
9.2 Defence and Intelligence
9.3 Government and Public Sector
9.4 Telecommunications
9.5 Critical Infrastructure
9.6 Cloud and SaaS Providers
9.7 Healthcare
9.8 Automotive, IoT, and Manufacturing
9.9 Comparative Summary

10 MIGRATION SERVICES AND CONSULTING

10.1 Market Structure
10.2 Pure-Play PQC Consultancies
10.3 Systems Integrators
10.4 Cloud-Vendor Migration Services
10.5 Specialty Hardware Vendors
10.6 Managed PQC Services and the Shift in the Services Mix
10.7 Strategic Implications for Service Providers

11 MARKET FORECASTS 2026–2036

11.1 Total Addressable Market
11.2 Forecast by Cryptographic Approach
11.3 Forecast by Product Category
11.4 Forecast by End-User Group
11.5 Forecast by Region
11.6 Migration Services Forecast
11.7 Growth Scenarios

12 REGIONAL ANALYSIS

12.1 North America
12.2 Europe
12.3 Asia-Pacific
12.4 Rest of World
12.5 Regional Forecast and Share Dynamics

13 COMPANY PROFILES (42 company profiles)

14 RESEARCH METHODOLOGY

14.1 Research Approach
14.2 Market Definition and Segmentation
14.3 Forecasting Model
14.4 Assumptions and Limitations

15 TERMS AND DEFINITIONS

16 REFERENCES

簡介目錄圖表

List of Tables

Table 1. PQC total addressable market — products vs. services 2026–2036 (millions USD)
Table 2. Three types of cryptography relevant to the PQC transition
Table 3. Reference Q-Day estimates by source, 2026
Table 4. PQC algorithm families — characteristics and trade-offs
Table 5. NIST-standardized post-quantum algorithms
Table 6. PQC standards and standards bodies overview
Table 7. Government and sector PQC migration mandates and deadlines
Table 8. The quantum-safe migration stack — layers, function, and representative vendors
Table 9. PQC market drivers — characterization
Table 10. PQC market drivers and restraints
Table 11. Driver and restraint impact scores
Table 12. PQC market elements — Technology Readiness Level assessment, 2026
Table 13. End-use opportunity ranking
Table 14. Per-segment SWOT and recommended posture
Table 15. Industry migration timelines and regulatory drivers
Table 16. Estimated cumulative quantum-safe migration spend by sector (millions USD)
Table 17. Quantum-safe migration services market by category, 2026–2036 (millions USD)
Table 18. Total PQC addressable market 2026–2036 (millions USD)
Table 19. PQC algorithm market by cryptographic approach 2026–2036 (millions USD)
Table 20. PQC product market by category 2026–2036 (millions USD)
Table 21. PQC product market by end-user group 2026–2036 (millions USD)
Table 22. PQC product market by region 2026–2036 (millions USD)
Table 23. Quantum-safe migration services market by category 2026–2036 (millions USD)
Table 24. PQC algorithm & product market — growth scenarios (millions USD)
Table 25. PQC product market by region 2026–2036 (millions USD)
Table 26. Regional market characteristics summary

List of Figures

Figure 1. Migration Services vs. PQC Products — the 8–12× Ratio (millions USD)
Figure 2. Global PQC Total Addressable Market 2026–2036 (millions USD)
Figure 3. PQC Algorithm & Product Market 2026–2036 (millions USD)
Figure 4. PQC Market Drivers and Restraints
Figure 5. Harvest-Now-Decrypt-Later: Why Migration Cannot Wait for Q-Day
Figure 6. PQC Product Market by Region, 2036
Figure 7. How a Quantum Computer Breaks Public-Key Cryptography
Figure 8. Three Quantum-Era Security Approaches Compared
Figure 9. PQC Market Map: Products, Services and End-Users
Figure 10. Data Retention Windows vs. the Q-Day Risk Horizon
Figure 11. Estimated Cumulative Probability of Q-Day, 2026–2046
Figure 12. Indicative Quantum Hardware Roadmap vs. the CRQC Threshold
Figure 13. The Four Families of Post-Quantum Cryptography
Figure 14. PQC Algorithm Market Share by Approach 2026–2036 (% of value)
Figure 15. Key and Signature Sizes: Classical vs. Post-Quantum (bytes, log scale)
Figure 16. PQC Standardization and Migration-Mandate Timeline 2016–2036
Figure 17. The Global PQC Regulatory Landscape
Figure 18. The Quantum-Safe Migration Stack
Figure 19. Crypto-Agility Maturity Model
Figure 20. PQC Product Market by Category 2026–2036 (millions USD)
Figure 21. PQC Product Categories: Margin vs. Market Size
Figure 22. Net Impact of PQC Market Drivers and Restraints
Figure 23. SWOT Analysis: The Post-Quantum Cryptography Market
Figure 24. Technology Readiness of PQC Market Elements, 2026
Figure 25. Technology Readiness vs. 2036 Market Size by Element
Figure 26. Five-Step Framework for Exploring a PQC Market Opportunity
Figure 27. End-Use Market Opportunity Matrix
Figure 28. Industry Migration Timelines: Peak Activity Windows
Figure 29. Cumulative Quantum-Safe Migration Spend by Sector (millions USD)
Figure 30. Quantum-Safe Migration Services Market by Category 2026–2036 (millions USD)
Figure 31. The Quantum-Safe Migration Services Provider Landscape
Figure 32. Shift in Migration Services Mix, 2026 vs. 2036 (% of services market)
Figure 33. Total PQC Addressable Market 2026–2036 (millions USD)
Figure 34. PQC Algorithm Market by Cryptographic Approach (millions USD)
Figure 35. PQC Product Market by End-User Group, 2036 (millions USD)
Figure 36. PQC Product Market by Region 2026–2036 (millions USD)
Figure 37. PQC Algorithm & Product Market — Scenario Band (millions USD)
Figure 38. PQC Product Market Growth by Region 2026–2036 (millions USD)
Figure 39. Regional Share of PQC Product Market, 2026 vs. 2036