Thales has integrated quantum-safe encryption into its Imperva platform using hybrid TLS handshakes to protect enterprise data against future decryption threats from advanced quantum computing capabilities.

Key Points

• Thales now utilizes a hybrid TLS handshake combining classical X25519 with the quantum-safe MLKEM768 algorithm.
• The implementation aligns with NIST standards, including FIPS 203, to defend against "harvest now, decrypt later" data collection.
• This security upgrade is currently active across all Imperva sites with no measurable impact on network latency or application performance.
• Regulatory bodies, including those overseeing finance and defense, are increasingly mandating post-quantum cryptographic readiness for critical infrastructure.
• The hybrid approach provides defense-in-depth by requiring attackers to break both classical and quantum-resistant algorithms simultaneously.

Why it Matters

Adopting post-quantum cryptography is essential for protecting long-term sensitive data, such as financial and healthcare records, from adversaries currently harvesting encrypted traffic. By implementing hybrid solutions now, organizations can meet emerging regulatory compliance requirements while mitigating the risk of future data exposure without sacrificing operational performance.