EvolextQuantum
Navigation

PQC migration service

Test and migrate a defined post-quantum path

Move a selected system or protocol from roadmap to controlled engineering work with documented architecture, interoperability, performance, and operational limits.

Evolext’s work currently focuses on research, assessment, and controlled laboratory prototypes. Production changes require separately agreed engineering and validation.

Discuss this scope ↗

Who this is for

Organizations with an inventory, readiness decisions, and a specific system or protocol that is suitable for controlled post-quantum engineering work.

The question this answers

Can a selected approach meet agreed compatibility and operational criteria in a test environment?

What we need to begin

  • A selected use case with an identified owner and decision objective
  • Relevant inventory and readiness findings, including unresolved risks
  • A safe test environment, representative integrations, and rollback boundaries
  • Confirmed platform, protocol, provider, and compliance constraints

What we engineer and test

  • Algorithm and protocol fit for the selected use case and supported implementation
  • Interoperability across clients, services, libraries, providers, and fallback paths
  • Performance, resource, certificate, message-size, and operational effects
  • Key, identity, deployment, monitoring, rollback, and incident-response implications
  • Residual risks, unsupported dependencies, and production decision gates

What you receive

  • A documented architecture decision and evidence level
  • A controlled laboratory prototype or narrowly scoped implementation
  • Reproducible compatibility and performance test results
  • A deployment, rollback, monitoring, and follow-up backlog for the defined scope

Important limitations

  • A laboratory prototype is not evidence that the same design is production-ready or universally quantum-safe.
  • Production deployment depends on the selected protocol, platform, provider support, operational controls, and client approval.
  • The service does not replace independent security review, compliance assessment, or ongoing cryptographic lifecycle management.

When the work is complete

The agreed tests have been run and a validation summary records results, unmet criteria, limitations, and a proceed, revise, or stop recommendation. A failed candidate can be a useful outcome; completion does not imply production readiness.

Scope, schedule, and fees are agreed after reviewing requirements. An inquiry does not create an engagement or guarantee availability or an outcome.

Illustrative example · not client work

Prototype validation summary

Observation / decision
A candidate protocol path needs an interoperability decision.
Evidence source
A planned test matrix and laboratory measurements; no measured results are asserted in this example.
Uncertainty
Client compatibility, resource costs, and fallback behavior are not yet established.
Owner
Engineering owner, to be agreed.
Next action
Run agreed tests and record pass, fail, and untested cases before any production decision.

How the engagement works

  1. 01

    Select

    Confirm the use case, success measures, supported standards, environment, and stop conditions.

  2. 02

    Design

    Document the architecture, dependencies, trust boundaries, operational path, and alternatives.

  3. 03

    Prototype

    Implement and test in the agreed environment with reproducible compatibility and performance evidence.

  4. 04

    Decide

    Record limitations, residual risk, rollback needs, and whether production work is justified.

Evidence and limitations

Laboratory prototype or scoped implementation — evidence level stated per engagement

Evolext work is research-, assessment-, and prototype-stage. Guidance and source findings do not establish production readiness, compliance, or universal security.

Access boundaries, approved collection methods, permitted recipients, and retention or deletion arrangements must be agreed before collection. Discuss whether approved exports can answer the question without production access. Do not send repositories, credentials, keys, or confidential reports through the inquiry form.

NCCoE guidance informs discovery and migration planning. FIPS 203, 204, and 205 define ML-KEM, ML-DSA, and SLH-DSA algorithm standards respectively; they do not establish protocol, vendor, or system readiness. Applicable references and implementation limits must be recorded for each engagement. References are not certification.

NCCoE migration guidance ↗

Last reviewed:

Choose your starting point. ↗

Tell us which system or migration decision you want to explore. Keep the first inquiry high-level; do not submit credentials, private keys, secrets, or confidential reports.

Discuss this scope ↗Read the privacy policy ↗Migration ↗