Cyber Security Cloud, Inc. (Headquarters: Shinagawa-ku, Tokyo; Representative Director, President and CEO: Toshihiro Koike; hereinafter referred to as "the Company"), a global security manufacturer, is pleased to announce that it has commenced technical verification to support Post-Quantum Cryptography (hereinafter referred to as "PQC"), with a view to the future practical application of quantum computers.

Through this technical verification, we aim to accumulate technical knowledge regarding PQC and realize PQC support in Cloud-based WAF, "Shadankun."​

◼︎Background: Global shift towards PQC
As research and development of quantum computers progresses globally, it has been pointed out that if large-scale quantum computers become practical in the future, the security of public-key cryptography, which is currently widely used on the internet, may be compromised. To prepare for these future risks, efforts are underway worldwide to transition to "PQC," which is designed to withstand attacks by quantum computers.

In August 2024, the U.S. National Institute of Standards and Technology (NIST) officially released the first three standards for PQC (FIPS 203, FIPS 204, and FIPS 205), recommending that organizations begin migrating to the new standards.

Furthermore, in 2026, the G7 Cybersecurity Working Group published a statement on preparing for the transition to PQC. It emphasized that the transition to PQC should not be solely a technical department issue, but rather a cross-organizational effort involving management, finance, procurement, and other departments. As a first step, it highlighted the importance of a "crypto asset inventory" to understand the extent of crypto usage, including within the company's systems and supply chain.

In Japan, the Financial Services Agency (FSA) held a "Study Group on Responses to Post-Quantum Cryptography by Deposit-Taking Financial Institutions" in 2024 to discuss recommendations, challenges, and points to note when financial institutions consider transitioning to PQC, and published a report in November of the same year.

As described above, efforts are underway both domestically and internationally to standardize PQC and to implement concrete migration measures. In light of these trends, our company has begun technical verification for PQC compliance, with the aim of continuing to provide a secure web environment even in the quantum computing era.

◼︎Technical verification for PQC compliance at our company
With an eye on the practical application of quantum computers, and as a security provider supporting web services, we have begun efforts to accumulate the technical knowledge necessary for migrating to PQC and to verify the feasibility of implementing it in our services.

In this technical verification, we will organize the technical requirements for web communication using PQC, and also verify compatibility with existing web environments, the impact on communication performance, and technical challenges for application to the security services we provide.

Specifically, we plan to conduct our investigation focusing on the following aspects:

Technical verification of the PQ/T (Post-Quantum/Traditional) hybrid key agreement scheme as defined in RFC 10024.
- Checking compatibility with existing web environments and browsers.
- Verification of the impact on communication performance and response time
- Clarifying the technical requirements and challenges for implementation in our services.

Based on the insights gained through this technical verification, our initial goal is to implement PQC support in Cloud-based WAF, "Shadankun."​

"Shadankun" is Cloud-based WAF that detects and blocks cyberattacks on websites, protecting communication between users and web servers. Looking ahead to the ongoing migration to PQC, we aim to create an environment where our customers can provide web services safely for years to come, from the perspectives of both web security and encrypted communication.

◼︎Regarding the future
Through this technical verification, we will accumulate technical knowledge regarding PQC and advance research and development toward applying PQC to the security services we provide.

As a first step, we will utilize the knowledge gained from this technical verification to realize PQC (Protection Quality Control) support in "Shadankun."

We will announce the official release date and details of the PQC support for "Shadankun" as soon as they are decided.

Moving forward, our company will continue to anticipate changes in the technological environment surrounding cybersecurity and contribute to the realization of a safe cyberspace through research and development of security technologies that not only address current cyberattacks but also look ahead to future threats.

Cyber Security Cloud, Inc. https://www.cscloud.co.jp)
Address: 13th Floor, JR Tokyu Meguro Building, 3-1-1 Kami-Osaki, Shinagawa-ku, Tokyo 141-0021, Japan
Representative: Toshihiro Koike Representative Director, President and CEO
Established: August 2010

With the mission of "creating a safe and secure cyberspace for people all over the world," we are a Japanese security manufacturer that provides web application security services utilizing world-leading cyber threat intelligence, as well as vulnerability information collection and management tools and fully managed security services for cloud environments. As one of the global companies in cybersecurity, we will contribute to solving social issues related to cybersecurity and providing added value to society.