CipherLaw

Counsel for the frontier of computation

Intellectual property, diligence and licensing for cryptography, cybersecurity, artificial intelligence and big data, from lawyers and researchers who read the papers before they write the claims.

Talk to usOur practice

Practice

  • Patent portfolios

    We find what is new in the research and claim it so it survives Section 101 and the prior art. More

  • IP due diligence

    Whether the claims hold, whether title is clean, and whether data and trade secrets survive the closing. More

  • Licensing and transactions

    Licenses, joint development, the IP side of M&A, and founder and inventor paperwork. More

Post-quantum

We built the PQC Tracker to follow the post-quantum transition across research, standards and deployment. It shows which ideas are gaining ground, the people and organizations behind them, and how proposals move toward adoption.

Follow an idea from a research paper to its authors, related drafts and standards discussions. Compare progress across TLS, certificates, secure messaging and hardware, or examine the patent disclosures associated with IETF drafts and NIST’s post-quantum process. Read the introduction.

Post-quantum Internet-Drafts by stage, per quarter
Active individual and working-group drafts, and cumulative RFCs, since 2022. Updated Oct 16, 2026. The last quarter is to date.0501001502022 Q1: 16 active individual drafts; 1 active working-group drafts; 6 published as RFC, cumulative.2022 Q12022 Q2: 16 active individual drafts; 1 active working-group drafts; 6 published as RFC, cumulative.2022 Q3: 15 active individual drafts; 4 active working-group drafts; 6 published as RFC, cumulative.2022 Q4: 22 active individual drafts; 6 active working-group drafts; 6 published as RFC, cumulative.2023 Q1: 23 active individual drafts; 12 active working-group drafts; 6 published as RFC, cumulative.2023 Q2: 25 active individual drafts; 11 active working-group drafts; 6 published as RFC, cumulative.2023 Q3: 32 active individual drafts; 12 active working-group drafts; 6 published as RFC, cumulative.2023 Q4: 33 active individual drafts; 14 active working-group drafts; 6 published as RFC, cumulative.2024 Q1: 35 active individual drafts; 12 active working-group drafts; 7 published as RFC, cumulative.2024 Q12024 Q2: 40 active individual drafts; 19 active working-group drafts; 7 published as RFC, cumulative.2024 Q3: 35 active individual drafts; 18 active working-group drafts; 8 published as RFC, cumulative.2024 Q4: 49 active individual drafts; 19 active working-group drafts; 10 published as RFC, cumulative.2025 Q1: 63 active individual drafts; 21 active working-group drafts; 13 published as RFC, cumulative.2025 Q2: 58 active individual drafts; 25 active working-group drafts; 16 published as RFC, cumulative.2025 Q3: 57 active individual drafts; 24 active working-group drafts; 22 published as RFC, cumulative.2025 Q4: 70 active individual drafts; 25 active working-group drafts; 24 published as RFC, cumulative.2026 Q1: 73 active individual drafts; 28 active working-group drafts; 27 published as RFC, cumulative.2026 Q2: 112 active individual drafts; 29 active working-group drafts; 28 published as RFC, cumulative.2026 Q3: 127 active individual drafts; 31 active working-group drafts; 28 published as RFC, cumulative.2026 Q4 to date: 130 active individual drafts; 31 active working-group drafts; 28 published as RFC, cumulative.2026 Q4
  • Active individual drafts
  • Active working-group drafts
  • Published as RFC, cumulative
2026 Q4 to date: 130 active individual drafts; 31 active working-group drafts; 28 published as RFC, cumulative.

CipherLaw PQC Tracker ↗ · Oct 16, 2026

Hover over a quarter for values. With the chart focused, use left and right arrow keys to select a quarter, or Home and End.
Data and method

Active drafts have a revision within the preceding 185 days. RFCs are cumulative; their timing is approximated by the draft’s last revision. The final quarter is counted through Oct 16, 2026.

Quarterly counts
QuarterIndividualWorking groupRFCs
2022 Q11616
2022 Q21616
2022 Q31546
2022 Q42266
2023 Q123126
2023 Q225116
2023 Q332126
2023 Q433146
2024 Q135127
2024 Q240197
2024 Q335188
2024 Q4491910
2025 Q1632113
2025 Q2582516
2025 Q3572422
2025 Q4702524
2026 Q1732827
2026 Q21122928
2026 Q31273128
2026 Q4*1303128
Ideas
336
IETF drafts
338
Organizations
716
People
2,166

Updated . Free access with a Google or GitHub account.

Shor’s algorithm · a small experiment

From a measurement to factors

Sample a quantum Fourier distribution. Can the measurements reveal the hidden period?

N =
a =
Fourier measurementQ = 64 · 6 control qubits
TheoryObserved frequency0 runs
Probability / frequency25%0y = 0: 25.00%y = 1: 0.00%y = 2: 0.00%y = 3: 0.00%y = 4: 0.00%y = 5: 0.00%y = 6: 0.00%y = 7: 0.00%y = 8: 0.00%y = 9: 0.00%y = 10: 0.00%y = 11: 0.00%y = 12: 0.00%y = 13: 0.00%y = 14: 0.00%y = 15: 0.00%y = 16: 25.00%y = 17: 0.00%y = 18: 0.00%y = 19: 0.00%y = 20: 0.00%y = 21: 0.00%y = 22: 0.00%y = 23: 0.00%y = 24: 0.00%y = 25: 0.00%y = 26: 0.00%y = 27: 0.00%y = 28: 0.00%y = 29: 0.00%y = 30: 0.00%y = 31: 0.00%y = 32: 25.00%y = 33: 0.00%y = 34: 0.00%y = 35: 0.00%y = 36: 0.00%y = 37: 0.00%y = 38: 0.00%y = 39: 0.00%y = 40: 0.00%y = 41: 0.00%y = 42: 0.00%y = 43: 0.00%y = 44: 0.00%y = 45: 0.00%y = 46: 0.00%y = 47: 0.00%y = 48: 25.00%y = 49: 0.00%y = 50: 0.00%y = 51: 0.00%y = 52: 0.00%y = 53: 0.00%y = 54: 0.00%y = 55: 0.00%y = 56: 0.00%y = 57: 0.00%y = 58: 0.00%y = 59: 0.00%y = 60: 0.00%y = 61: 0.00%y = 62: 0.00%y = 63: 0.00%03263Measured value y

Each run returns one value, not the whole distribution.

01 · MeasureNo measurements yet.

02 · ReconstructA continued fraction will suggest a denominator.

03 · Verify & factorThe period is not supplied to the reconstruction.

Explore the mathematics

Q = 64 is below N² = 225. Small registers can work here, but lack the usual general precision guarantee.

This models complete dephasing of the exponent register in its computational basis. Its Fourier outcomes become uniform. Chance samples may still yield factors in these tiny examples; they no longer concentrate near the useful phases.

Changing the instance, register size, or coherence starts a new experiment.

The modular function

The first 16 values of ax mod N. Equal values label the same state of the output register; their exponent amplitudes can interfere.

The Fourier chart is not a transform of these bar heights. It sums amplitudes within each group of equal function values, then adds the groups’ probabilities.

From a sample to an order

A sample gives y/Q ≈ k/r. Continued fractions produce possible reduced fractions; their denominators may be divisors of r. We keep candidates within half a Fourier bin, combine denominator hypotheses by least common multiples, and test aᴿ mod N = 1. A verified exponent is reduced by removing redundant prime factors to obtain the order r.

This is a bounded teaching implementation for N = 15 and 21. The usual textbook choice N² ≤ Q < 2N² gives Q = 256 and 512 respectively. Finite precision can produce incorrect candidates; the modular check is essential.

Run the experiment to inspect the latest continued fraction.

Most recent measurements (0)
RunyCandidate k/raᵈ mod N
No measurements yet.

The ideal distribution

P(y)=1Q2∑z|∑x:f(x)=ze2πixy/Q|2

Here f(x) = aˣ mod N, 0 ≤ x < Q, and 0 ≤ z < N. This is the normalized distribution when the output register is ignored, with no postselection. The simulator computes it from f(x), without using a known period. In the dephased model, P(y) = 1/Q.

An even order helps only when aʳᐟ² is a nontrivial square root of 1 modulo N. An odd order or aʳᐟ² ≡ −1 calls for a different base.

Shor’s paper · Order finding explained

A classical simulation of quantum order finding at toy size. Applying Shor’s algorithm to an RSA-2048 modulus would require a sufficiently large, fault-tolerant quantum computer.

Team

Research

All research

Get in touch

We are glad to discuss a matter at an early stage.

Contact usinfo@cipher.law