Comparative expertise
Post-quantum key encapsulation approaches
One fixed criteria frame. Every populated cell traces to one dated readiness verdict; missing evidence remains explicit.
- Data as of
- 2026-08-20
- Definition pinned
- 2026-07-12
- Revision
- 2
- Definition version
- v1.0.0
- Method
- v1.3.0
Fixed matrix
Verdict fields, side by side
AI-assisted assembly · derived results
Scope: Post-Quantum Cryptography · Security & Identity. No average, blend, composite, or estimate is produced.
| Criterion | HQC (FIPS 207) hqc-fips-207 | X-Wing Hybrid KEM x-wing-hybrid-kem | Google Cloud KMS Quantum-Safe KEMs google-cloud-kms-pqc-kems |
|---|---|---|---|
| Verified readiness verdict.readiness.verified | 40 | 55 | 49 |
| Hype gap verdict.readiness.gap | 15 | 15 | 16 |
| Evidence strength verdict.readiness.strength | Strong | Strong | Strong |
| Recommended stance verdict.decision.answer | Track; not yet | Adopt with guardrails | Proceed with caution |
| Latest evidence verdict.evidence_summary.latest_observed_on | 2025-03-13 | 2026-05-01 | 2025-10-08 |
Human editorial
Synthesis and caveats
Human editorial · 2026-07-17
Synthesis
HQC was selected by NIST on 2025-03-11 as the fifth PQC algorithm — a code-based hedge to ML-KEM — with draft FIPS 207 expected around early 2026 and finalization around 2027; it remains a draft, which keeps ML-KEM the primary deployment path. X-Wing advanced to draft-connolly-cfrg-xwing-kem-10 (2026-03-02), an individual Internet-Draft without formal IETF standing. Google Cloud KMS's quantum-safe KEMs (ML-KEM-768/1024 and X-Wing) entered Preview on 2025-09-23 (announced publicly 2025-10-07) and remain in preview as of mid-2026 per Cloud Security Alliance migration guidance. Peer-reviewed benchmarking shows HQC is practical in datacenter settings, with hardware offload delivering multiples of host throughput under load. A 32,011-domain measurement found no pure post-quantum certificates in its sample — observed deployment runs through hybrid key exchange. Independent reports name weak cryptographic agility in legacy key-management APIs, incomplete end-to-end migration, and KEM overhead on constrained systems as the blockers. Signals suggest hybrid constructions in the X-Wing style are the deployable 2026 path, while pure code-based KEMs remain a hedge pending the FIPS 207 freeze.
Caveats
Some assessment-grade sources are self-labeled unreviewed rapid research (tier 3). Sample-based deployment measurements cannot establish absence beyond their sample. Cloud preview status dates shift; re-dated on material delta.
Approved by pragma.vision editorial — operator dev@soft.house · 2026-07-17