{"id":9421,"date":"2026-09-10T09:00:00","date_gmt":"2026-09-10T09:00:00","guid":{"rendered":"https:\/\/cybersecurityinfocus.com\/?p=9421"},"modified":"2026-09-10T09:00:00","modified_gmt":"2026-09-10T09:00:00","slug":"getting-ahead-of-harvest-now-decrypt-later-post-quantum-cryptography-planning","status":"publish","type":"post","link":"https:\/\/cybersecurityinfocus.com\/?p=9421","title":{"rendered":"Getting ahead of \u2018harvest-now-decrypt-later\u2019: Post-quantum cryptography planning"},"content":{"rendered":"<div>\n<div class=\"grid grid--cols-10@md grid--cols-8@lg article-column\">\n<div class=\"col-12 col-10@md col-6@lg col-start-3@lg\">\n<div class=\"article-column__content\">\n<div class=\"container\"><\/div>\n<p class=\"wp-block-paragraph\">I\u2019ve sat in enough boardroom conversations about quantum computing to notice a pattern. Someone raises it, someone else says \u201cthat\u2019s ten years out,\u201d and the topic gets tabled until next year\u2019s budget cycle. The clock that matters isn\u2019t the one measuring when a quantum computer arrives. It started running the moment your organization first sent sensitive data over a channel an adversary could capture and store.<\/p>\n<p class=\"wp-block-paragraph\">A nation-state or well-resourced criminal group doesn\u2019t need a working quantum computer today to threaten you. It needs storage capacity and your ciphertext, both of which it likely already has. It can sit on that data for years and decrypt it retroactively the day a cryptographically relevant quantum computer exists. Data that only needed to stay private for a few months isn\u2019t at risk under this model. A patient record, a source code repository, a decade-long trade secret or classified government material is a different story. For many organizations, that story is already unfolding.<\/p>\n<div class=\"extendedBlock-wrapper block-coreImage undefined\"><button class=\"lightbox-trigger\">\n<p>\t\t\t<\/p><\/button>\n<p><em>Figure 1: Harvest-now-decrypt-later timeline.<\/em><\/p>\n<p class=\"imageCredit\">Ashish Mishra<\/p>\n<\/div>\n<h2 class=\"wp-block-heading\">Why the deadlines keep moving closer<\/h2>\n<p class=\"wp-block-paragraph\">NIST\u2019s transition plan, published as <a href=\"https:\/\/www.nist.gov\/news-events\/news\/2024\/11\/transition-post-quantum-cryptography-standards-draft-nist-ir-8547-available\">NIST IR 8547<\/a>, gives you actual dates to plan around: RSA-2048 and ECC P-256 get deprecated by 2030, and they\u2019re gone from NIST standards entirely by 2035. That timeline isn\u2019t theoretical anymore. NIST spent eight years getting here, and in August 2024 it finally landed three finalized <a href=\"https:\/\/www.nist.gov\/news-events\/news\/2024\/08\/nist-releases-first-3-finalized-post-quantum-encryption-standards\">FIPS standards.<\/a> ML-KEM handles key encapsulation. ML-DSA and SLH-DSA cover digital signatures, using two different mathematical approaches so you\u2019re not betting everything on one scheme holding up. A fourth standard, <a href=\"https:\/\/csrc.nist.gov\/projects\/post-quantum-cryptography\/post-quantum-cryptography-standardization\">FN-DSA (built on the FALCON algorithm and designated FIPS 206), is due out later this year.<\/a><\/p>\n<p class=\"wp-block-paragraph\">Organizations in national security or defense-adjacent environments are working against a tighter window. <a href=\"https:\/\/www.nsa.gov\/Press-Room\/News-Highlights\/Article\/Article\/3148990\/nsa-releases-future-quantum-resistant-qr-algorithm-requirements-for-national-se\/\">The NSA requires national security systems to adopt quantum-resistant cryptography for new acquisitions starting in 2027<\/a>. The UK has set its own pace on a similar structure \u2014 <a href=\"https:\/\/www.ncsc.gov.uk\/news\/pqc-migration-roadmap-unveiled\">the NCSC\u2019s guidance splits the transition into three phases:<\/a> identifying cryptographic services and building a migration plan through 2028, executing high-priority upgrades from 2028 to 2031, then completing migration across all systems, services and products between 2031 and 2035.<\/p>\n<p class=\"wp-block-paragraph\">None of this belongs in the \u201cfuture planning\u201d bucket anymore. A 2030 deprecation deadline sounds distant until you map it against how long your organization takes to touch every system running cryptography. I\u2019ve run cryptographic discovery projects that stretched past a year just to produce an accurate inventory, for a client who thought they had a clear picture of their own environment going in.<\/p>\n<h2 class=\"wp-block-heading\">Let the math set your timeline, not the headlines<\/h2>\n<p class=\"wp-block-paragraph\">Mosca\u2019s theorem is worth learning even if you never see the formula written out. It weighs three numbers against each other: how long migration will take you (X), how long your data needs to stay confidential (Y) and how soon a cryptographically relevant quantum computer is likely to exist (Z). When X plus Y outpaces Z, you\u2019re already exposed, whether the exposure has been noticed yet.<\/p>\n<p class=\"wp-block-paragraph\">Run that comparison against your own data instead of against an industry average. A retail transaction log with a two-year retention window carries a different risk profile than genomic data, merger documentation or infrastructure design specs that need to stay confidential for thirty years. For a good number of organizations, that confidentiality window runs well into the 2030s and beyond \u2014 healthcare records, financial data and classified information can need protection for fifty years or more. If any of your data fits that description, \u201cquantum computers are a decade away\u201d stops being a reason to wait and starts being the reason you\u2019re already behind.<\/p>\n<h2 class=\"wp-block-heading\">What migration requires<\/h2>\n<p class=\"wp-block-paragraph\">Treating this like a patch cycle is the mistake I see most often \u2014 swap an algorithm, ship an update, move on. That framing misses the scale of what\u2019s involved. Migrating to post-quantum cryptography means locating every algorithm in every protocol, on every device, across every product in your supply chain and replacing each one without breaking interoperability with everyone else going through the same transition on their own timeline.<\/p>\n<p class=\"wp-block-paragraph\">Start with discovery, because it\u2019s the piece every client underestimates going in. You need a real inventory of where RSA, ECC and other quantum-vulnerable algorithms are running \u2014 in TLS configurations, code signing processes, VPN tunnels, embedded firmware and third-party libraries you didn\u2019t write and may not fully control. Almost every discovery project I\u2019ve been part of has turned up cryptography the client had forgotten existed.<\/p>\n<p class=\"wp-block-paragraph\">From there, the architectural goal is crypto-agility rather than a one-time fix. Migrating once and hoping the next transition goes smoother isn\u2019t a strategy, since there will be a next transition. Building systems where swapping an algorithm doesn\u2019t require rebuilding the surrounding infrastructure means abstracting cryptographic operations behind interfaces that don\u2019t hard-code a specific algorithm and standing up key management that can run classical and post-quantum algorithms side by side during the overlap period.<\/p>\n<p class=\"wp-block-paragraph\">Prioritization should track data sensitivity and exposure time, not convenience or ease of implementation. Systems holding data with long confidentiality windows need to move first. Public-facing TLS endpoints carrying traffic vulnerable to harvest-now-decrypt-later deserve early attention too, since that\u2019s the traffic most likely already sitting in someone else\u2019s storage.<\/p>\n<p class=\"wp-block-paragraph\">Vendor coordination is where I\u2019ve watched migrations lose months. Your own readiness only goes as far as the readiness of every vendor whose cryptography your systems depend on. Asking vendors for their PQC roadmaps now costs you nothing, and waiting until your migration hits a dependency you don\u2019t control costs you a quarter you didn\u2019t budget for.<\/p>\n<div class=\"extendedBlock-wrapper block-coreImage undefined\"><button class=\"lightbox-trigger\">\n<p>\t\t\t<\/p><\/button>\n<p><em>Figure 2: The migration workstream wheel.<\/em><\/p>\n<p class=\"imageCredit\">Ashish Mishra<\/p>\n<\/div>\n<h2 class=\"wp-block-heading\">Where to start this quarter<\/h2>\n<p class=\"wp-block-paragraph\">You don\u2019t need a board mandate to justify the first step here. <a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography\">CISA, NSA and NIST have jointly published a six-step migration playbook, and cryptographic discovery<\/a> \u2014 the first step in it \u2014 is something you can start on your own budget and your own schedule, without waiting on a vendor or a committee decision.<\/p>\n<p class=\"wp-block-paragraph\">In my experience, the organizations struggling in 2030 won\u2019t be the ones running the most complicated environments. They\u2019ll be the ones who spent 2026 waiting for someone else to move first, even though the standards were already finalized and the guidance was already public.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>I\u2019ve sat in enough boardroom conversations about quantum computing to notice a pattern. Someone raises it, someone else says \u201cthat\u2019s ten years out,\u201d and the topic gets tabled until next year\u2019s budget cycle. The clock that matters isn\u2019t the one measuring when a quantum computer arrives. It started running the moment your organization first sent [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":9403,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-9421","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-education"],"_links":{"self":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/9421"}],"collection":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9421"}],"version-history":[{"count":0,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/posts\/9421\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=\/wp\/v2\/media\/9403"}],"wp:attachment":[{"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecurityinfocus.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}