On March 27, 2026, Sender Su, co-founder of Wave Computing Novation Limited (HKCS Corporate Member) and HKCS Professional Member, attended the “Quantum Resilient Finance: Hong Kong’s Next Frontier” seminar jointly organized by The Hong Kong Institute of Bankers (HKIB) and The Hong Kong Computer Society (HKCS). The session was packed, reflecting the industry’s growing sense of urgency regarding “Q-Day.”
The core consensus was clear: quantum computing is no longer a theoretical exercise but an imminent engineering challenge. Regarding the deployment of Post-Quantum Cryptography (PQC), NIST has officially released the first batch of core standards, including FIPS 203/204/205, providing the industry with definitive algorithmic guidelines. On the application front, the CA/B Forum has proposed an aggressive timeline—planning to shorten TLS certificate validity to 47 days by 2029 to mitigate computational threats by compressing the attack window.
As a CIO deeply involved in the digital transformation of traditional industries, I am particularly focused on how these standards can “soft land” into existing enterprise architectures. In my view, a “Hybrid Mode” (running both traditional and PQC algorithms simultaneously) is the inevitable transitional solution. Much like the dual-certificate strategy used during the migration from SHA-1 to SHA-256, this approach ensures business stability while gradually introducing quantum-resistant security.
Furthermore, the “Encryption Proxy” mechanism mentioned at the conference holds significant operational value. For many traditional enterprises, completely rebuilding core systems is prohibitively expensive. By deploying encryption proxies at the system boundary—maintaining traditional encryption internally while providing quantum-resistant connections externally—this “bridging” method allows for transparent upgrades at a lower cost. This aligns perfectly with our approach to IT operations for manufacturing and retail clients: achieving smooth technological iteration while guaranteeing business continuity.
While the Hong Kong Monetary Authority (HKMA) has not yet released a specific mandatory roadmap, maintaining “Cryptographic Agility” is urgent. Wavecn Limited will continue to monitor PQC developments and provide tailored cybersecurity upgrade solutions for traditional industries, helping enterprises build a solid digital foundation.