Commvault Unveils New Post-Quantum Cryptography Capabilities to Help Customers Protect Data from a New Generation of Security Threats
- First-mover advantage in quantum-resistant cryptography implementation among cyber resilience vendors
- Immediate availability of new HQC algorithm support for existing customers
- Simple implementation through checkbox configuration reduces adoption barriers
- Strong endorsements from key customers including government and healthcare sectors
- Limited availability to only Commvault Cloud customers running specific software versions
- Potential implementation costs and system requirements not disclosed
Insights
Commvault's PQC enhancements strengthen its competitive position as quantum computing threats loom, showing technological leadership in cyber resilience.
Commvault's expansion of post-quantum cryptography (PQC) capabilities represents a strategic technological advancement in the cyber resilience market. The company is building upon its existing crypto-agility framework introduced in August 2024, which already supported NIST-recommended standards like CRYSTALS-Kyber and CRYSTALS-Dilithium. The addition of Hamming Quasi-Cyclic (HQC) algorithm specifically addresses the emerging \'harvest now, decrypt later\' threat vector—a sophisticated attack method where adversaries store encrypted data until quantum computers become powerful enough to break traditional encryption.
What's particularly notable is Commvault's first-mover advantage in this space. They appear to be among the earliest cyber resilience vendors implementing PQC, positioning them ahead of competitors as quantum computing threats materialize. The implementation method—using a simple checkbox configuration—removes adoption barriers for customers, which is crucial for security features that might otherwise face implementation resistance.
The endorsements from the Nevada Department of Transportation and British Medical Association demonstrate that Commvault's approach resonates with organizations in highly regulated sectors where data protection requirements are stringent. These testimonials from government and healthcare clients signal market validation for a technology that addresses future threats rather than immediate ones.
Commvault's timing is strategic—while widespread quantum decryption capabilities aren't imminent, the company is establishing itself as a thought leader and technology pioneer in anticipation of regulatory requirements that will inevitably emerge. The ISACA statistics cited (63% of professionals believe quantum will increase cybersecurity risks) indicate growing market awareness, which Commvault is well-positioned to capitalize on as organizations begin prioritizing quantum-resistant security measures in their technology stacks.
Expanded support for new encryption standards empowers customers to proactively safeguard long-term sensitive data against 'harvest now, decrypt later' quantum threats
Quantum computing uses quantum mechanics to process data and solve complex problems that could take decades with classical computers. However, these advancements bring unprecedented security challenges, along with the potential for threat actors to use quantum computing to decipher and unlock traditional encryption methods. According to the Information Systems Audit and Control Association's (ISACA) Quantum Computing Pulse Poll,
Commvault has provided support for quantum-resistant encryption standards, like CRYSTALS-Kyber, CRYSTALS-Dilithium, SPHINCS+, and FALCON, as recommended by the National Institute of Standards and Technology (NIST) since August 2024. It was then that Commvault introduced a cryptographic agility (crypto-agility) framework, enabling its customers, via the Commvault Cloud platform, to address rapidly evolving threats without overhauling their systems. With today's announcement, Commvault has built on that framework by adding support for Hamming Quasi-Cyclic (HQC), a new error correcting code-based algorithm designed to defend against threats like 'harvest now, decrypt later' where adversaries are intercepting encrypted network traffic and storing it for a later time when quantum computers are powerful enough to decrypt it.
"The quantum threat isn't theoretical," said Bill O'Connell, Chief Security Officer at Commvault. "We were among the first cyber resilience vendors to address post-quantum computing, and by integrating new algorithms like HQC and advancing our crypto-agility framework, we are providing our customers with the tools to navigate this complex landscape with confidence. Our goal is simple and clear: as quantum computing threats emerge, we intend to help our customers keep their data protected."
For industries where long-term data storage is required, like finance and healthcare, Commvault's expanded post-quantum cryptography capabilities provide access to a variety of safeguards that can help fortify network tunnels against quantum-based attacks. With Commvault's Risk Analysis capabilities, customers can discover and classify data to determine where these cryptographic capabilities may be helpful. In addition, Commvault's capabilities are simple to implement, often using a checkbox configuration, making it easy for customers to utilize when needed.
The evolving quantum landscape – the need for speed
As investments pour into the quantum field, the time to address emerging threats is shrinking. This makes proactive adoption of post-quantum cryptography critical.
"Quantum readiness has become a business imperative, particularly for industries which handle data that remains sensitive for decades. The time when currently encrypted data can be decrypted using quantum technology is closer than many people think," said Phil Goodwin, Research VP, IDC. "Commvault's early adoption of quantum-resistant cryptography and commitment to crypto-agility positions it at the forefront among data protection software vendors in proactively addressing quantum threats. Organizations with sensitive, long-term data need to prepare now for a quantum world."
"Commvault has been an invaluable partner in our journey to enhance cyber resilience. Their leadership in adopting post-quantum cryptography, combined with their crypto-agility framework, is exactly what we need to meet stringent government security mandates and protect highly sensitive information from emerging quantum threats," said Jeff Day, Deputy Chief Information Security Officer, Nevada Department of Transportation.
"Safeguarding sensitive data is paramount, and the long-term threat of quantum decryption is a significant concern. Commvault's rapid integration of NIST's quantum-resistant standards, particularly HQC, gives us great confidence that our critical information is protected now and well into the future," said Peter Hands, Chief Information Security Officer, British Medical Association. "Their commitment to crypto-agility is important for healthcare organizations like ours."
Availability
Commvault's post-quantum cryptography capabilities, including support for NIST's HQC algorithm, are immediately available to all Commvault Cloud customers running software version CPR 2024 (11.36) and later, enabling seamless adoption of quantum-resistant protection.
To learn more about Commvault's quantum-resistant encryption solutions and how to future-proof your data security strategy, read today's blog, watch our executive videos here and here, and check out the executive brief.
About Commvault
Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience, helping more than 100,000 organizations keep data safe and businesses resilient and moving forward. Today, Commvault offers the only cyber resilience platform that combines the best data security and rapid recovery at enterprise scale across any workload, anywhere—at the lowest TCO.
1 ISAC. (2025, April 28). Despite Rising Concerns,
View original content to download multimedia:https://www.prnewswire.com/news-releases/commvault-unveils-new-post-quantum-cryptography-capabilities-to-help-customers-protect-data-from-a-new-generation-of-security-threats-302476029.html
SOURCE COMMVAULT
FAQ
What new quantum cryptography features did Commvault (CVLT) announce in June 2025?
Which industries will benefit most from Commvault's quantum-resistant encryption?
When will Commvault's new post-quantum cryptography features be available?
What quantum-resistant encryption standards does Commvault support?
How does Commvault implement its quantum-resistant encryption features?
