TL;DR: Quantum computers will soon break today’s RSA and ECC encryption, and regulators now require migration timelines that make this a fiduciary risk, not just an IT task. Boards must fund and govern post-quantum cryptography (PQC) migration now because “harvest now, decrypt later” attacks are already capturing encrypted data.
What Changed in the Last 18 Months
The threat moved from theoretical to scheduled. NIST finalized its first PQC standards in August 2024: ML-KEM (FIPS 203) for key encapsulation, ML-DSA (FIPS 204) for digital signatures, and SLH-DSA (FIPS 205) as a hash-based backup. These algorithms resist both classical and quantum attacks. Meanwhile, Google’s Willow chip and IBM’s roadmap have compressed expert timelines for cryptographically relevant quantum computers to roughly 2030–2035, with some estimates earlier.
If you want to dig deeper, check out our guide on 7 Proven Health Habits That Boost Energy and Longevity.
The Regulatory Clock Is Ticking
US federal agencies must inventory cryptographic systems by 2025 and complete high-risk migrations by 2030 under NSM-10 and OMB mandates. The EU’s NIS2 and DORA regimes push similar resilience duties onto financial and critical-infrastructure firms. Compliance officers are now translating these into audit findings, which is why the topic has reached board agendas.
Industry Impact and Specs
Hybrid deployments are the pragmatic path: combine X25519 with ML-KEM-768 for key exchange and ECDSA with ML-DSA-65 for signatures. Cloud providers, browsers, and messaging apps already ship hybrid TLS. The hard part is cryptographic discovery—finding every certificate, VPN, HSM, and firmware dependency. Typical enterprise migrations run three to seven years, so starting in 2026 means finishing just in time.
For boards, the ask is simple: approve a crypto-agility budget, assign executive ownership, and demand a quantum-readiness roadmap with measurable milestones.
FAQ
Q: When will quantum computers actually break RSA?
A: Most experts estimate a cryptographically relevant machine within 10–15 years, but stolen data can be decrypted retroactively, so preparation must start now.
Q: What should companies do first?
A: Build a cryptographic inventory, then prioritize hybrid PQC deployment for long-lived sensitive data and external-facing systems.
Q: Is PQC expensive?
A: Costs are moderate compared to breach risk; the bigger investment is staff time for discovery, testing, and vendor coordination.
Leave a Reply