Central Fox · Security
Post-Quantum Cryptography at Central Fox — honestly
Most companies talk about 'quantum' like magic. We measure it, separate truth from hype, and ship only what actually protects your data.
What we apply today (true and verifiable)
- Post-quantum edge and transport: TLS 1.3 at the edge (Cloudflare) and admin SSH with hybrid post-quantum key exchange (sntrup761x25519).
- Quantum-resistant data at rest: AES encryption, considered resistant to quantum attacks.
- Claims governance: no 'quantum computing' claim without proof. We only assert what we measured.
What we do NOT do (and why that's an edge)
We do not use quantum computing to 'speed up' anything — we tested it and it was ~2,700× slower for our workloads, with no quality gain. We'd rather tell the truth than sell illusion. Quantum resistance (PQC) protects you; quantum computing, for an SMB, delivers no value yet.
Frequently asked questions
What is post-quantum cryptography (PQC)?
PQC is a set of classical algorithms resistant to quantum-computer attacks, standardized by NIST in 2024 (ML-KEM/Kyber, ML-DSA/Dilithium, SLH-DSA). It is not quantum computing — it's classical software designed to survive 'Q-Day', when a large enough quantum computer would break RSA and ECC.
Is there a quantum-resistant SaaS?
Central Fox applies post-quantum transport across its infrastructure: the edge (Cloudflare, TLS 1.3) and admin SSH use hybrid post-quantum key exchange, and data at rest uses AES. We're a back-office SaaS for small businesses adopting PQC incrementally and transparently.
How do I prepare my business for Q-Day?
Start with the near-zero-cost wins: ensure TLS 1.3 (most CDN edges already offer post-quantum key exchange), enable post-quantum SSH KEX, and use AES at rest. Plan migrating RSA/ECC signatures to NIST standards (Dilithium) over 2–4 years. The real threat today is 'harvest-now, decrypt-later'.
Can invoices/documents be signed with post-quantum signatures?
Today fiscal signing uses regulated PKI (RSA/ECC). Migration depends on the ecosystem (there is no post-quantum CA in the public WebPKI yet). Central Fox tracks this — including Pix moving toward PQC — and designs its infrastructure to support hybrid signatures once the standard matures.
Does quantum computing make the product faster or smarter?
No — and we measured it. In our own benchmark (quantum kernel vs. classical similarity search), the quantum method was ~2,700× slower with identical quality. For SMB workloads there's no advantage today. That's why we ship quantum resistance (PQC), not quantum computing. Claiming otherwise would be dishonest.