Post-Quantum Cryptography (PQC) Support in Sterling B2B Integrator

Quantum computing presents a significant long-term risk to several widely deployed cryptographic algorithms currently used to protect data in transit, including RSA, ECDHE, and DHE, which form the foundation of modern TLS implementations.

The immediate concern for governments, regulatory bodies, and financial institutions is the "Harvest Now, Decrypt Later" (HNDL) threat, where encrypted data captured today could potentially be decrypted in the future as quantum computing capabilities mature. As a result, many organizations have already initiated strategic programs to assess, mitigate, and transition away from quantum-vulnerable cryptographic mechanisms.

In alignment with emerging industry standards and NIST's post-quantum cryptography initiative, the longer-term objective is to phase out classical cryptographic algorithms such as RSA, ECDHE, and DHE, and adopt quantum-resistant algorithms including:

ML-KEM (Module-Lattice-Based Key Encapsulation Mechanism)
ML-DSA (Module-Lattice-Based Digital Signature Algorithm)
SLH-DSA (Stateless Hash-Based Digital Signature Algorithm)

Given the critical role of Sterling B2B Integrator in securing enterprise and financial data exchanges, we request IBM Product Management to:

Evaluate and prioritize support for NIST-standardized Post-Quantum Cryptography (PQC) algorithms within Sterling B2B Integrator.
Define a roadmap for introducing PQC-enabled TLS and digital signature capabilities.
Publish indicative timelines and target releases for PQC support to assist customers in strategic planning, regulatory readiness, and quantum risk mitigation initiatives.

Early visibility into IBM's PQC strategy and product roadmap will enable customers to align their modernization efforts and proactively address evolving cybersecurity and regulatory requirements