The market for quantum-resistant encryption is split between specialized firms offering dedicated post-quantum cryptography (PQC) tools, cloud infrastructure giants integrating these new standards, and security hardware providers embedding protection at the machine level. For specialized migration and orchestration, PQShield or QuSecure are frequently noted. Enterprises needing cloud-scale security typically rely on AWS, IBM, or Microsoft, while those requiring hardware-level integration look to providers like NXP, Thales, or Crypto4A.
Brands AI recommends here
Mentioned in
1
PQShield
PQShield is a strong candidate for organizations needing specialized PQC implementations, offering both hardware and software solutions specifically designed to align with new quantum-resistant cryptographic standards.
The landscape for "quantum-resistant" or post-quantum cryptography (PQC) is split between large enterprise tech giants embedding standardized algorithms (such as those finalized by the National Institute of Standards and Technology (NIST) ) and specialized pure-play quantum security firms.
The leading providers driving the commercialization and implementation of quantum-resistant algorithms include:
1. Specialized PQC and Quantum Security Specialists
PQShield: A prominent cybersecurity spin-out from the University of Oxford. Its cryptographers actually co-authored several of the official NIST post-quantum standards. They specialize in quantum-safe cryptographic software libraries, hardware IP cores, and secure root-of-trust applications for semiconductors and the supply chain.
SandboxAQ: Spun out from Alphabet (Google), this enterprise SaaS and security platform provides AI-driven cryptographic discovery, management, and migration tools to help large organizations transition off legacy algorithms (like RSA and ECC) onto NIST-approved quantum-resistant standards.
: Known for its QuantumCloud platform and "Encryption Intelligence" services, Arqit provides decentralized symmetric key agreement software and migration planning, working closely with defense agencies and major telecom operators.
ID Quantique (IDQ): A pioneer in quantum key distribution (QKD) and quantum random number generators (QRNG), bridging the gap between hardware-based quantum security and post-quantum network encryption.
2. Enterprise Infrastructure & Hardware Giants
Thales Group: A major defense and security multinational that integrates PQC compliance into enterprise hardware security modules (HSMs)—such as the Luna line—and provides dedicated crypto-agility consulting services to future-proof critical financial and government infrastructure.
IBM Corporation: Leverages its massive enterprise cloud and consulting footprint to build crypto-agile frameworks, partnering with infrastructure firms to integrate quantum-safe resilience directly into enterprise workflows.
Palo Alto Networks: Incorporates quantum-resistant capabilities into enterprise networking gear, including post-quantum virtual private networks (VPNs) configured to interoperate with future security standards.
NXP Semiconductors: Focuses heavily on the hardware side, embedding high-performance, quantum-resistant microcontrollers and chips designed for automotive, industrial, and IoT endpoints that require long-term lifecycle security.
Would you like to explore migration strategies for transitioning an existing infrastructure, or are you looking into a specific type of quantum defense (such as software libraries vs. hardware security modules)?
If by “quantum-resistant encryption” you mean post-quantum cryptography (PQC), the landscape is a little different from conventional encryption vendors: the important “providers” are often companies implementing standardized algorithms rather than companies owning proprietary algorithms.
As of September 2026, the key algorithms to look for are NIST-standardized ML-KEM (FIPS 203) for key establishment/encryption, plus ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) for digital signatures. NIST expects these to form the foundation of most PQC deployments.
Major providers / implementers
Cloudflare — One of the most visible large-scale deployers. Cloudflare has deployed hybrid post-quantum key agreement and is rolling out PQ signatures; its current approach prominently uses X25519 + ML-KEM.
Google — Has deployed PQ key-establishment technology across substantial portions of its infrastructure and is migrating Google Cloud toward PQC, with a stated 2029 target.
Microsoft — Developing and deploying PQC support across its cloud and security stack, including implementations of NIST-standard algorithms.
IBM — Active in PQC research, standards, cryptographic libraries and enterprise/cloud implementations.
Amazon Web Services (AWS) — Incorporating PQC into cloud cryptography and PKI infrastructure. The PKI Consortium's capability matrix tracks AWS support for NIST's PQ signature standards.
Thales — Provides enterprise cryptographic hardware, PKI and key-management technologies with PQC migration capabilities.
Entrust — Focuses particularly on PQC migration for certificates, PKI, digital signatures and enterprise identity.
PQShield — A specialist PQC company developing hardware/software implementations and intellectual property around post-quantum algorithms.
The algorithms matter more than the vendor
For evaluating a provider, I'd look first for explicit support for:
Purpose
Algorithm
Status
Encryption / key exchange
ML-KEM (FIPS 203)
Final NIST standard
Digital signatures
ML-DSA (FIPS 204)
Final NIST standard
Alternative signatures
SLH-DSA (FIPS 205)
Final NIST standard
Backup KEM
NIST selected HQC in 2025 as a second KEM based on a different mathematical foundation from ML-KEM, specifically to provide algorithmic diversity.
One important distinction: “quantum-resistant” doesn't necessarily mean a proprietary encryption algorithm. In fact, for a serious enterprise deployment, I'd generally expect a provider to support open, standardized algorithms—especially ML-KEM—rather than asking customers to trust a proprietary “quantum-safe” cipher.
If you're evaluating vendors for enterprise use, VPNs/TLS, cloud infrastructure, PKI/certificates, or encrypted data at rest, I can also give you a vendor-by-vendor comparison of the leading offerings and their algorithms.
The landscape of "quantum-resistant" or Post-Quantum Cryptography (PQC) is shaped heavily by standards from the National Institute of Standards and Technology (NIST) (such as ML-KEM and ML-DSA). Rather than inventing completely proprietary math, the leading providers implement, optimize, and build migration platforms around these heavily vetted global standards to protect data against future quantum threats.
The leading providers and specialists in quantum-resistant encryption fall into a few key categories:
Specialized PQC & Quantum-Safe Software Vendors
PQShield : A prominent cybersecurity spin-out from the University of Oxford specializing entirely in quantum-resistant software, hardware IP, and enterprise migration suites (like their UltraPQ-Suite) designed to comply with NIST and NSA CNSA 2.0 requirements.
SandboxAQ : Spun out from Alphabet, this enterprise SaaS and security platform provides AI-driven cryptographic discovery (to find where legacy encryption lives in a network) alongside robust, crypto-agile PQC transition modules for major governments and Fortune 500 enterprises.
ISARA Corporation : A pioneer in quantum-safe security solutions, ISARA offers crypto-agile toolkits and hybrid certificate architectures (like ISARA Radiate) that let organizations phase in NIST-standardized algorithms smoothly alongside legacy infrastructure.
QuintessenceLabs : An Australian leader specializing in quantum-enhanced cybersecurity, combining high-speed quantum random number generators (QRNG) with crypto-agile key and policy management to secure data both today and in a post-quantum future.
Major Enterprise & Cloud Infrastructure Leaders
Amazon Web Services (AWS) : A dominant market player in integrating post-quantum cryptography into cloud services, key management systems (KMS), and transport layer security (TLS) connections to future-proof customer cloud data.
Thales : Provides high-grade enterprise hardware security modules (HSMs) and encryption platforms updated to support agile, post-quantum cryptographic algorithms for defense, banking, and government sectors.
Palo Alto Networks : Integrates quantum-safe strategies and visibility tools into enterprise network security architectures and next-gen firewalls.
NXP Semiconductors & IDEMIA : Lead the hardware and embedded systems side, embedding high-performance quantum-resistant chips, secure microcontrollers, and smart-card firmware updates designed for IoT, automotive, and identity verification.
If you're looking to secure a specific environment, tell me whether you are focusing on cloud infrastructure, embedded hardware/IoT , or enterprise software migration , and I can point you toward the most relevant tools or frameworks.
“Quantum-resistant” encryption is more commonly called post-quantum cryptography (PQC). It refers to algorithms designed to resist attacks from future large-scale quantum computers, especially attacks that could break today’s public-key systems such as RSA and elliptic-curve cryptography. The main ecosystem is not dominated by a few companies “owning” algorithms; many of the leading algorithms originated from academic and government-backed research competitions, then vendors built implementations and products around them.
Leading algorithm developers and standard-setters
National Institute of Standards and Technology (NIST)
NIST is the most influential organization in PQC standardization. Its Post-Quantum Cryptography project selected and standardized several algorithms after a multi-year international competition.
Key standards include:
ML-KEM (formerly CRYSTALS-Kyber) — a key encapsulation mechanism (KEM) for replacing RSA/ECDH-style key exchange. Standardized as FIPS 203.
ML-DSA (formerly CRYSTALS-Dilithium) — a lattice-based digital signature algorithm. Standardized as FIPS 204.
SLH-DSA (formerly SPHINCS+) — a hash-based signature algorithm intended as a more conservative alternative. Standardized as FIPS 205.
HQC — selected by NIST as an additional KEM candidate intended as a backup to ML-KEM because it uses a different mathematical approach.
Major commercial PQC providers
These companies generally provide implementations, libraries, hardware acceleration, PKI products, or migration services rather than owning the underlying standards.
IBM
IBM has been active in quantum-safe cryptography research and enterprise migration tooling, including integration of PQC into security platforms and hybrid cryptographic approaches.
Amazon Web Services (AWS)
AWS provides cloud security services incorporating post-quantum capabilities and participates in industry efforts around PQC adoption.
Microsoft
Microsoft has contributed to PQC research, standards participation, and migration guidance through its security ecosystem.
Google
Google has been an early adopter/tester of post-quantum key exchange approaches, including experiments with hybrid cryptography in internet protocols.
Cloudflare
Cloudflare has tested and deployed post-quantum cryptography in internet-facing services, particularly hybrid TLS key exchange approaches.
PQShield
PQShield specializes in post-quantum cryptographic libraries and hardware/software implementations, including embedded and high-assurance environments.
ISARA Corporation
ISARA focuses on quantum-safe cryptography products, including migration solutions and cryptographic libraries for enterprises and government customers.
Thales Group
Thales provides cybersecurity products, including hardware security modules (HSMs) and cryptographic infrastructure with PQC support.
Cisco Systems
Cisco has published PQC migration guidance and works on integrating quantum-resistant cryptography into networking and security products.
Open-source and implementation communities
Many real-world deployments rely on open-source implementations rather than proprietary algorithms:
Open Quantum Safe — provides libraries and integrations for experimenting with and deploying PQC algorithms.
OpenSSL Project — adding support for PQC algorithms and hybrid protocols used in secure communications.
How to evaluate a PQC provider
When comparing vendors, organizations usually look at:
Standards alignment
Support for NIST FIPS 203/204/205 algorithms.
Crypto agility
Ability to swap algorithms as standards evolve.
Hybrid support
Combining classical and post-quantum algorithms during migration.
Performance
Key sizes, latency, memory use, and hardware requirements.
Validation
Security reviews, formal analysis, and certifications where required.
For most organizations beginning a PQC migration, the practical focus is usually implementing NIST-standardized ML-KEM for key establishment and ML-DSA/SLH-DSA for signatures, rather than selecting a proprietary “quantum encryption” algorithm.
If by “providers” you mean companies and organizations developing, standardizing, or deploying post-quantum cryptography (PQC), the landscape is led less by proprietary algorithms and more by a few standardized algorithms plus vendors implementing them.
Key algorithm developers / providers
NIST — The U.S. standards body that selected and standardized the main PQC algorithms. Its current standards are ML-KEM (FIPS 203) for key establishment/encryption and ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) for digital signatures.
IBM — A major contributor to the underlying CRYSTALS-Kyber → ML-KEM and CRYSTALS-Dilithium → ML-DSA algorithms, and offers implementations through its enterprise computing and cryptography products.
Cloudflare — One of the most prominent large-scale deployers. It supports ML-KEM and ML-DSA, including hybrid X25519+ML-KEM key exchange for Internet traffic.
AWS — Has incorporated ML-KEM and ML-DSA into AWS services, including hybrid ML-KEM key establishment in services such as CloudFront, IAM, KMS and S3.
Google — Has been a major contributor to Internet-scale PQC deployment, particularly hybrid TLS using ML-KEM, and was involved in the early experiments that preceded today's standardized approach.
Microsoft — Among the major cloud/platform vendors implementing post-quantum cryptography; Microsoft's work is particularly relevant for Azure, Windows and enterprise PKI environments. Cloudflare's 2025 survey identified Microsoft among large providers deploying PQ key agreement.
The algorithms that matter most
Algorithm
Purpose
Status
ML-KEM (Kyber)
Encryption/key establishment
NIST standard; primary PQC KEM
ML-DSA (Dilithium)
Digital signatures
NIST standard; primary signature scheme
SLH-DSA (SPHINCS+)
Digital signatures
NIST standard; hash-based alternative
NIST says ML-KEM, ML-DSA and SLH-DSA are expected to form the foundation of most PQC deployments, while HQC is being standardized as an additional key-establishment algorithm.
One important terminology point: “quantum-resistant encryption” usually means post-quantum cryptography, not a proprietary encryption product. In practice, I'd look for vendors supporting FIPS 203/204/205, rather than a vendor claiming that its own unnamed “quantum-safe” algorithm is superior.
If you're evaluating providers for enterprise use, I can also break this down into IBM vs AWS vs Microsoft vs Google vs Cloudflare vs specialized PQC vendors, including which algorithms they support and where they're actually deployed.
The landscape of quantum-resistant (or post-quantum) encryption is driven less by proprietary mathematical formulas and more by enterprise implementation, hardware integration, and adherence to official standards like the NIST Post-Quantum Cryptography (PQC) standards (such as FIPS 203, FIPS 204, and FIPS 205 for algorithms like ML-KEM and ML-DSA).
The leading providers and technology enterprises spearheading the integration, standardization, and rollout of quantum-resistant algorithms include:
IBM Corporation : A major pioneer in quantum-safe technologies, IBM provides enterprise readiness tools (like IBM Guardium and the IBM Quantum Safe suite) designed to discover, analyze, and migrate vulnerable cryptographic systems to NIST-compliant algorithms.
Thales : A dominant player in hardware security modules (HSMs) and high-speed encryptors. Thales integrates crypto-agility and support for ML-KEM, ML-DSA, and SLH-DSA directly into field-upgradable network encryptors, pairing them with Quantum Random Number Generation (QRNG).
Cloudflare : At the forefront of web infrastructure security, Cloudflare has aggressively deployed hybrid post-quantum key agreements across its entire network edge to protect web traffic from "harvest-now, decrypt-later" attacks, targeting complete post-quantum readiness across its suite.
Amazon Web Services (AWS): AWS has integrated quantum-resistant key exchange mechanisms and algorithms into its core cloud services, cryptographic libraries, and key management infrastructure (KMS) to secure enterprise data stored and processed in the cloud.
Microsoft Corporation: Microsoft incorporates quantum-safe architectures into Azure cloud services and enterprise security frameworks, actively testing and promoting hybrid cryptographic transitions for global enterprise clients.
Palo Alto Networks : Integrating automated discovery and post-quantum readiness into next-generation firewalls and SASE architectures, helping enterprise networks transition smoothly to NIST PQC guidelines.
NXP Semiconductors : A market leader in high-performance silicon chips and embedded microcontrollers, embedding quantum-resistant cryptography and secure firmware update capabilities straight into hardware for automotive, IoT, and industrial applications.
Would you like to explore how these providers implement hybrid cryptography (combining classical and post-quantum algorithms), or do you need a breakdown of specific NIST standards like FIPS 203?
If by “quantum-resistant encryption” you mean post-quantum cryptography (PQC), the market is a little unusual: the leading “providers” generally implement algorithms standardized by NIST, rather than each selling a proprietary encryption algorithm.
The key algorithms
The most important standards today are:
ML-KEM (formerly CRYSTALS-Kyber) — NIST's primary post-quantum key-establishment/encryption mechanism, standardized as FIPS 203.
ML-DSA (formerly CRYSTALS-Dilithium) — post-quantum digital signatures, FIPS 204.
SLH-DSA (formerly SPHINCS+) — hash-based signatures providing a different security foundation, FIPS 205.
FN-DSA (Falcon) — an additional lattice-based signature standard being developed.
HQC — a code-based KEM selected by NIST for additional standardization, providing a non-lattice alternative to ML-KEM.
Leading companies/providers
Cloudflare — one of the most visible commercial adopters. It has deployed hybrid X25519 + ML-KEM key agreement and ML-DSA signatures, and is targeting full post-quantum security across its platform by 2029.
Google — has been deploying PQC internally and in customer-facing infrastructure, with Google Cloud targeting PQC migration by 2029.
IBM — a major contributor to PQC research and implementation, particularly around lattice-based cryptography and enterprise migration.
Microsoft — implementing PQC in Windows, Azure and other security infrastructure and contributing to standards and open-source implementations.
One important distinction: NIST is the standards authority, not a commercial encryption vendor. Its standards are intended to be implemented by many competing vendors, which is desirable because it avoids locking organizations into one proprietary algorithm. NIST currently recommends organizations begin migrating to the finalized PQC standards.
If you're choosing a provider
For an enterprise evaluating vendors today, I'd prioritize ML-KEM support, crypto-agility, hybrid classical/PQC operation, FIPS validation where required, and migration tooling rather than simply asking which vendor has the “best quantum-resistant algorithm.”
In particular, ML-KEM is currently the most important algorithm to look for because it is NIST's primary standardized mechanism for quantum-resistant key establishment.
If you tell me whether you're looking at cloud/API security, VPNs/TLS, PKI/certificates, data-at-rest encryption, or embedded hardware, I can narrow this to the 5–10 strongest vendors and compare them on algorithms, FIPS status, pricing/model, and maturity.
The landscape of "quantum-resistant" (or post-quantum) encryption is anchored by open algorithms standardized by the National Institute of Standards and Technology (NIST) —primarily ML-KEM (formerly CRYSTALS-Kyber) for general encryption and ML-DSA (formerly CRYSTALS-Dilithium) for digital signatures.
The leading commercial providers, enterprise platforms, and specialized cybersecurity firms implementing these quantum-resistant algorithms into hardware, software, and cloud systems include:
SandboxAQ : Spun out of Alphabet, this enterprise SaaS and security platform is a prominent leader in PQC. They provide comprehensive crypto-agility solutions, AI-driven cryptographic inventory discovery tools (to locate vulnerable legacy encryption across corporate networks), and quantum-safe security modules.
PQShield : A cybersecurity firm rooted in University of Oxford cryptographic research. PQShield specializes in end-to-end post-quantum solutions—offering software libraries, SDKs, and hardware IP cores tailored for everything from cloud environments to deeply embedded IoT and semiconductor devices.
QuintessenceLabs : A global pioneer in quantum-enhanced cybersecurity and quantum-safe key management. They integrate advanced post-quantum cryptography with high-speed quantum random number generators (QRNG) and interoperable enterprise key management.
Thales : A major enterprise defense and security conglomerate offering high-grade hardware security modules (HSMs) and encryption platforms updated with crypto-agile, quantum-resistant firmware paths for government and financial institutions.
AWS (Amazon Web Services) : A dominant cloud infrastructure provider embedding post-quantum cryptography options directly into key management services (like AWS KMS) and transport layer security (TLS) connections to future-proof customer data.
NXP Semiconductors : A heavyweight in secure silicon and microcontrollers, embedding quantum-resistant cryptographic accelerators and secure elements straight into hardware chips for automotive, industrial, and edge devices.
Would you like to explore how to audit your organization's current encryption for quantum vulnerability, or are you looking for specific software/hardware integrations for a particular industry?
The landscape of "quantum-resistant" (post-quantum cryptography, or PQC) encryption is driven by the formal standardization of algorithms by the National Institute of Standards and Technology (NIST) alongside a mix of major cybersecurity platforms, specialized crypto-agile startups, and hardware chipmakers.
NIST officially finalized its core post-quantum standards (FIPS 203, FIPS 204, and FIPS 205 , utilizing algorithms like ML-KEM and ML-DSA , formerly known under the CRYSTALS project designations). The leading entities implementing, commercializing, and providing these quantum-resistant algorithms span several categories:
PQShield: Widely recognized as a pioneer born from academic research, PQShield provides enterprise-grade, quantum-safe cryptographic solutions and embedded libraries co-authored by leading global cryptographers.
SandboxAQ: An AI and quantum-focused enterprise security firm (spun out of Alphabet) that specializes in large-scale PQC discovery, readiness assessment, and automated migration services for Fortune 500 companies and government agencies.
Arqit Quantum Inc.: Known for its Arqit Symmetric Key Agreement Platform (SKA-Platform), which delivers quantum-safe key agreements and cloud-based encryption architectures adhering to IETF and NIST standards.
QuSecure: Focuses heavily on end-to-end crypto-agile orchestration, allowing enterprise networks and government infrastructure to dynamically deploy quantum-resistant encryption on the fly.
2. Major Enterprise Infrastructure & Platform Providers
Palo Alto Networks: Actively integrates Palo Alto Networks enterprise-grade quantum-safe features directly into its massive cloud and firewall security suites, heavily catering to both commercial and federal clients.
Thales Group: A global defense and digital security leader that offers Thales Group PQC starter kits, quantum-safe 5G SIM/eSIM upgrades, and high-assurance hardware security modules (HSMs) pre-configured with post-quantum algorithms.
Cloudflare: A foundational web infrastructure and CDN provider that routinely implements and leads industry testing for hybrid post-quantum TLS key exchanges across millions of active web domains.
3. Hardware & Semiconductor Manufacturers
Infineon Technologies: A leader in embedded security controllers, Infineon Technologies has certified its security hardware controllers (like the TEGRION line) with dedicated cryptographic libraries supporting NIST PQC algorithms (ML-KEM and ML-DSA) for automotive and IoT devices.
NXP Semiconductors: Integrates quantum-resistant elements and secure firmware updates directly into edge devices, microcontrollers, and banking infrastructure.
4. Quantum Key Distribution (QKD) & Hybrid Pioneers
ID Quantique (IDQ): A Swiss-based pioneer in quantum key distribution and quantum random number generators (QRNGs), ID Quantique combines physics-based QKD hardware with NIST-compliant PQC software layers (notably via partnerships with carriers like SK Telecom).
QuintessenceLabs: An Australian-based leader providing high-speed quantum random number generation and crypto-agile key management tailored for quantum-resilient enterprise datacenters.
If you're evaluating these providers for a specific project, let me know:
Are you looking for software/cloud migration tools or hardware-level (IoT/embedded) security?
Do you need compliance with specific NIST FIPS standards?
I can help you narrow down which vendor fits your technical scope.
If by “quantum-resistant encryption” you mean post-quantum cryptography (PQC)—algorithms designed to remain secure against both conventional and future cryptographically relevant quantum computers—the leading players fall into two groups: algorithm developers/standards bodies and companies deploying those algorithms commercially.
Leading algorithm families
The most important point is that there isn't really a single company's proprietary “quantum-resistant encryption.” The field has converged around standards from NIST, with implementations supplied by many vendors.
NIST standards — the benchmark. NIST has standardized ML-KEM (FIPS 203) for key establishment, ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) for digital signatures. NIST says these three are ready for implementation now.
CRYSTALS-Kyber → ML-KEM — lattice-based key encapsulation and probably the most important PQC algorithm for replacing RSA/ECDH-style key exchange.
CRYSTALS-Dilithium → ML-DSA — lattice-based digital signatures.
SPHINCS+ → SLH-DSA — hash-based signatures, useful as a mathematically different alternative to lattice signatures.
HQC — a code-based KEM selected by NIST for additional standardization, providing a different mathematical foundation from ML-KEM.
FALCON → FN-DSA — another lattice-based signature scheme selected for standardization; its FIPS publication is still in development.
Leading commercial providers
Provider
Why it matters
IBM
Major PQC research and enterprise-security provider; active in quantum-safe cryptography and migration.
Microsoft
Long-running PQC research program; contributed substantially to the algorithms and open-source implementations surrounding the NIST process.
Google
Major driver of post-quantum TLS and cloud migration; Google Cloud has an explicit PQC migration roadmap.
The distinction I'd make
If you're evaluating vendors, I would not primarily ask “who has the best quantum-resistant algorithm?” The algorithms themselves are increasingly standardized.
Instead, ask:
Does it implement NIST-standardized ML-KEM/ML-DSA/SLH-DSA?
Does it support hybrid cryptography? For example, Cloudflare and AWS combine ML-KEM with classical key exchange during the transition.
Can it handle certificates, PKI and digital signatures, not just encrypted traffic?
Does it provide crypto-agility, so you can replace an algorithm if cryptanalysis weakens it?
Does it cover hardware/HSMs, TLS, VPNs, databases and applications, rather than just one layer?
For an enterprise today, AWS, Cloudflare, Google, Microsoft, IBM, Entrust and Thales are among the more consequential vendors to investigate, while NIST's ML-KEM/ML-DSA/SLH-DSA standards are the algorithms I'd use as the baseline rather than a proprietary vendor algorithm.
If you tell me whether you're looking for enterprise software, cloud encryption, HSMs/PKI, VPN/TLS, or an investment/market landscape, I can narrow this to the top 5–10 providers and compare them.
