# How to Begin Implementing Quantum-Safe Zero Trust Security for Cyber-Physical Systems with OpenZiti? **URL:** \ **Category:** Ziti Overlay\ **Created:** [November 13, 2024, 4:22pm UTC](https://openziti.discourse.group/t/how-to-begin-implementing-quantum-safe-zero-trust-security-for-cyber-physical-systems-with-openziti/3421 "2024-11-13T16:22:16Z")\ **Posts on this page:** 1\ **Showing post:** 3
**Author:** ![PhilipGriffiths](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/philipgriffiths/32/341_2.png) [@PhilipGriffiths](https://openziti.discourse.group/u/PhilipGriffiths)\ **Post date:** [November 13, 2024, 5:03pm UTC](https://openziti.discourse.group/t/how-to-begin-implementing-quantum-safe-zero-trust-security-for-cyber-physical-systems-with-openziti/3421/3 "2024-11-13T17:03:07Z")
A couple of things occur to me beyond your comments. As said, would be really useful to understand the goal and requirements more. Myself, I am happy to jump on a quick call if it helps. - The OpenZiti implementation of BYFE - Bring Your Favorite Engine - [GitHub - openziti/tlsuv: TLS and HTTP(s) client library for libuv](https://github.com/openziti/tlsuv)) - is crypto agile. So that could be a good place to start too. If allows for using OpenSSL for the hop-by-hop encryption. When I last looked it was v3.0, I am pretty sure 3.2 supports [post-quantum cryptography (PQC)](https://www.encryptionconsulting.com/education-center/introduction-to-post-quantum-cryptography/) signature algorithms and key establishment mechanisms - This was a different discourse conversation on BYOE - [How adopted is the BYFE concept?](https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462) - I have spoken to people in the community who wanted to test Ziti with cryptosystem dilithium2+p-256... I don't know the status but could check in --- _[View the full topic](https://openziti.discourse.group/t/how-to-begin-implementing-quantum-safe-zero-trust-security-for-cyber-physical-systems-with-openziti/3421)._