Nuclear power plants face a structural lifecycle asymmetry: their 60-80 year operational lifecycles exceed the anticipated arrival of Cryptographically Relevant Quantum Computers (CRQCs), so cryptographic material harvested today becomes decryptable within the service life of the systems it protects. This paper introduces a forensics-first framework for quantum resilience that treats forensic integrity as operationally essential rather than merely evidentiary, analyzing the quantum threat landscape across the Purdue architecture (L0-L5) to show how Harvest-Now, Decrypt-Later (HNDL) campaigns enabled by Shor's algorithm can retroactively compromise cryptographic foundations and undermine forensic evidence. Through two case studies, Quantum Scar and Quantum Dawn, we model attack feasibility via a conditional-chain formulation over structured expert-judgment priors anchored to documented HNDL activity and published CRQC roadmaps, yielding success probabilities of 8-78% under current defenses, where the upper bound corresponds to high-value facilities exhibiting cryptographic monoculture. We propose a defense-in-depth migration to Post-Quantum Cryptography (PQC) integrating hybrid key exchange, code and log integrity with anti-rollback, authenticated time synchronization, and side-channel-resistant implementations aligned with ISA/IEC 62443 and NIST standards, and specify seven design-level conformance criteria for validating it; modeled residual feasibility falls to 1-8% at Security Level 4 and below 1% under full PQC migration. We further contribute six MITRE ATT&CK for ICS technique extensions (T1001-T1006) as a standardized vocabulary for quantum-enabled infrastructure attacks. Quantum threats thus extend beyond cybersecurity to system safety, operational reliability, and post-incident evidence admissibility across multi-decade nuclear asset lifecycles.
Nuclear power plants face a structural lifecycle asymmetry: their 60-80 year operational lifecycles exceed the anticipated arrival of Cryptographically Relevant Quantum Computers (CRQCs), so cryptographic material harvested today becomes decryptable within the service life of the systems it protects. This paper introduces a forensics-first framework for quantum resilience that treats forensic integrity as operationally essential rather than merely evidentiary, analyzing the quantum threat landscape across the Purdue architecture (L0-L5) to show how Harvest-Now, Decrypt-Later (HNDL) campaigns enabled by Shor's algorithm can retroactively compromise cryptographic foundations and undermine forensic evidence. Through two case studies, Quantum Scar and Quantum Dawn, we model attack feasibility via a conditional-chain formulation over structured expert-judgment priors anchored to documented HNDL activity and published CRQC roadmaps, yielding success probabilities of 8-78% under current defenses, where the upper bound corresponds to high-value facilities exhibiting cryptographic monoculture. We propose a defense-in-depth migration to Post-Quantum Cryptography (PQC) integrating hybrid key exchange, code and log integrity with anti-rollback, authenticated time synchronization, and side-channel-resistant implementations aligned with ISA/IEC 62443 and NIST standards, and specify seven design-level conformance criteria for validating it; modeled residual feasibility falls to 1-8% at Security Level 4 and below 1% under full PQC migration. We further contribute six MITRE ATT&CK for ICS technique extensions (T1001-T1006) as a standardized vocabulary for quantum-enabled infrastructure attacks. Quantum threats thus extend beyond cybersecurity to system safety, operational reliability, and post-incident evidence admissibility across multi-decade nuclear asset lifecycles.
The arrival of cryptographically relevant quantum computers (CRQCs) represents an existential threat to the public-key cryptographic infrastructure underpinning global enterprise operations. Enterprise security today relies on RSA and elliptic-curve cryptography (ECC) for TLS, VPNs, PKI, code signing, and identity systems—all of which are fundamentally broken by Shor's algorithm on a sufficiently powerful quantum computer. The defining risk is time-shifted compromise: adversaries can harvest encrypted traffic today and decrypt it once CRQCs exist, a threat already underway according to U.S. intelligence assessments. NIST finalized three post-quantum cryptographic (PQC) standards in August 2024 (FIPS 203/204/205) and mandates deprecation of quantum-vulnerable algorithms by 2035. Yet only 5% of organizations have implemented quantum-safe encryption and 95% lack formal quantum transition plans. This paper provides a comprehensive, threat-driven analysis across seven dimensions: quantum algorithm impact, harvest-now-decrypt-later (HNDL) threat models, enterprise asset risks (PKI, TLS, VPNs, code signing, cloud, IoT, identity, blockchain, supply chain), sector-specific vulnerabilities (financial services, healthcare, critical infrastructure), cryptographic primitive analysis, migration standards and roadmaps, and enterprise readiness gaps. The convergence of HNDL attacks already underway, multi-decade data sensitivity windows, and 12–15 year enterprise migration timelines means the migration deadline has, for most sectors, already passed.
With the growth and advancement of quantum computing, conventional cryptographic methods are becoming increasingly vulnerable, particularly in the core aspects of cybersecurity, including identity, asset, and network security. In detail, the following paper will provide a systematic analysis of post-quantum cryptography (PQC) in these areas. It discusses the theoretical foundations and operational potential of PQC algorithms, including those based on lattices, which aim to withstand quantum attacks, enhance authentication systems, protect digital assets, and maintain secure network communications. Considering the standards efforts, such as the work by NIST and real-life projects (current implementations of NewHope by Google and pilot projects by AWS), as well as the implementation difficulties that the domain faces, the article provides an overview of strategies related to migration. It explains both the potential and the challenges that face the introduction of PQC into current security infrastructures. It focuses on hybrid cryptography, side-channel robustness, performance trade-offs, and regulatory issues. Ultimately, the findings of this study suggest adopting PQC as a proactive rather than a defensive approach, providing an opportunity to redesign the structure of contemporary cybersecurity to achieve greater security in the face of emerging threats in the future.
This study evaluates the feasibility of post-quantum cryptographic (PQC) algorithms in mitigating "Harvest Now, Decrypt Later" (HNDL) attacks as quantum computing advances threaten classical encryption. Using datasets from the NIST Post-Quantum Cryptography Project, Deloitte’s PQC Adoption Survey, and IBM & Google Quantum Roadmaps, the study applied statistical modeling, Monte Carlo simulations, and ARIMA forecasting to assess PQC security resilience, adoption readiness, and quantum decryption feasibility. The findings indicate that CRYSTALS-Kyber and CRYSTALS-Dilithium outperform RSA-2048 and ECC-256 in quantum resistance, with attack cost thresholds exceeding 1.91×10101.91 \times 10^{10}1.91×1010 compared to 2.24×1082.24 \times 10^82.24×108 for RSA-2048. Industry adoption varies, with government PQC implementation at 79%, finance at 67%, and healthcare lagging at 48%. Quantum decryption probability remains negligible until 2029 but rises to 78.6% by 2033. This study addresses the critical challenge of post-quantum cryptographic (PQC) adoption amid growing quantum threats, particularly "Harvest Now, Decrypt Later" (HNDL) attacks. By evaluating PQC security resilience, industry adoption, and quantum decryption feasibility, the findings provide strategic insights for policymakers and cybersecurity experts. Highlighting the vulnerabilities of CRYSTALS-Kyber to side-channel attacks, this research underscores the need for continuous cryptanalysis, hybrid encryption models, and adaptive security frameworks to future-proof data.Organizations must accelerate PQC adoption, integrate hybrid cryptographic models, enforce regulatory policies, and sustain cryptanalysis efforts to ensure long-term security.
Abstract—The advent of fault-tolerant Cryptanalytically Relevant Quantum Computers (CRQCs) presents an existential threat to modern information security. Shor's polynomial-time quantum algorithm renders widely deployed public-key cryptographic primitives—including RSA, Diffie-Hellman (DH), and Elliptic Curve Cryptography (ECDH/ECDSA)—completely vulnerable to private key derivation. Furthermore, 'Harvest Now, Decrypt Later' (HNDL) adversarial campaigns actively intercept and store encrypted enterprise telemetry today, anticipating future quantum decryption capabilities. In response, the National Institute of Standards and Technology (NIST) finalized its primary Post-Quantum Cryptography (PQC) standards in FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). However, transitioning complex enterprise IT ecosystems to quantum-resistant primitives introduces severe architectural and computational disruptions: public key and signature sizes increase by several orders of magnitude, cryptographic handshake latencies escalate, network packets experience Maximum Transmission Unit (MTU) fragmentation, and legacy Hardware Security Modules (HSMs) lack microarchitectural support for lattice-based polynomial arithmetic. This paper provides an exhaustive, mathematically grounded technical survey and architectural roadmap for enterprise PQC migration. We formalize the Module Learning with Errors (M-LWE) and Module Short Integer Solution (M-SIS) hardness foundations, evaluate hybrid classical/post-quantum cryptographic transition models across standard transport protocols (TLS 1.3, IKEv2/IPsec, SSH), and formulate an enterprise Crypto-Agility Maturity Model. Furthermore, we construct an empirical enterprise testbed measuring throughput, connection establishment latency, memory footprints, and packet fragmentation across legacy and quantum-resistant suites. Our results show that while ML-KEM-768 achieves microsecond-level encapsulation, its 1,088-byte ciphertext expands TLS ClientHello payloads into multiple TCP segments under constrained networks. Finally, we establish open research directions in post-quantum identity federations, stateful hash signature tracking, and hardware-accelerated polynomial arithmetic. Index Terms—Post-Quantum Cryptography (PQC), FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), Crypto-Agility, TLS 1.3, Lattice-Based Cryptography, Harvest Now Decrypt Later, Hardware Security Modules (HSM), Enterprise Migration.
The advent of cryptographically relevant quantum computers (CRQCs) poses a fundamental threat to public-key cryptography securing modern digital communications. The most immediate danger is not direct decryption but the harvest-now-decrypt-later (HNDL) attack, wherein adversaries passively collect and archive encrypted traffic today for retrospective decryption once a CRQC becomes operational. This threat is structurally difficult to counter because the collection phase generates no host- or account-level signals detectable by conventional intrusion-detection systems.Simultaneously, migration to NIST-standardized post-quantum cryptography (PQC) specifically ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) introduces new vulnerabilities, including chosen-ciphertext side-channel attacks, fault-injection attacks, and protocol downgrade attacks arising during hybrid deployment periods.Existing security tooling addresses cryptographic inventory, encrypted-traffic anomaly detection, and PQC readiness as isolated problems, leaving a critical operational gap. To address this, we propose QCAD (Quantum Cryptographic Attack Detection), a unified multi-plane detection framework integrating four complementary detection planes: (A) flow-metadata behavioral analytics targeting HNDL collection indicators; (B) host- and protocol-level telemetry for PQC implementation flaws and downgrade attacks; (C) continuous crypto-agility monitoring with per-asset Mosca-inequality risk scoring; and (D) quantum-vulnerable deception canaries. These planes feed a unified correlation layer that maps observations to MITRE ATT&CK techniques and produces risk-ranked alerts.Evaluation against synthetic HNDL and PQC-attack benchmarks demonstrates that cross-plane fusion achieves a recall of 0.97 at a 5% false-positive rate (F1 = 0.90, ROC-AUC = 0.99), substantially outperforming any individual plane, confirming that no single observable captures all attack families.A key boundary condition remains: HNDL detection is inherently a probabilistic behavioral-inference problem, and interception occurring on transit infrastructure beyond the defender's perimeter may remain undetectable regardless of sensor deployment.
Quantum computing’s arrival signals a paradigm shift in computational power that may transform several sectors, including drug discovery, artificial intelligence, materials research, and optimization [2]. However, this transformative potential also presents a significant and imminent threat to cybersecurity. At the heart of this technological shift is the ability of quantum computers to tackle the complex mathematical challenges on which modern public-key cryptography relies. Quantum algorithms, most notably Shor’s algorithm, can break problems such as integer factorization and discrete logarithms far more efficiently than classical approaches. As a result, cryptographic methods that are widely trusted today—including RSA and Elliptic Curve Cryptography (ECC)—could become insecure once large-scale quantum computing becomes a reality[1], [8].This poses a profound challenge to the confidentiality, integrity, and authenticity of digital communications, financial networks, essential infrastructure, and national defense systems [9]. To counter this emerging risk, Post-Quantum Cryptography (PQC) has become an important area of active research. The goal of PQC is to design cryptographic techniques that can withstand attacks from both conventional computers and future quantum systems, thereby preserving long-term data security in the face of advancing quantum technologies [3].A number of promising Post-Quantum Cryptography (PQC) approaches are currently being explored in depth. Among them, lattice-based cryptography has attracted significant interest, as it relies on the computational difficulty of problems like Learning With Errors (LWE) and the Shortest Vector Problem (SVP), offering both robust security assurances and practical efficiency [4], [5]. Hash-based signature schemes, such as XMSS and SPHINCS+, offer security rooted in well-established hashing techniques and stateless signature construction [7]. Additionally, code-based cryptography, including systems inspired by the McEliece cryptosystem, remains attractive for its long-standing resistance to cryptanalytic attacks [6]. Other avenues include multivariate quadratic systems and isogeny-based cryptography, each presenting unique benefits and trade-offs in terms of key size, performance, and security robustness [8].A central force driving global standardization is the NIST Post-Quantum Cryptography Standardization Project, initiated in 2016 to evaluate and establish new quantum-resilient cryptographic standards [3]. Several algorithms have already advanced to the final standardization phase, while others remain candidates for further evaluation.Despite this progress, transitioning to PQC introduces practical challenges. Integrating new cryptographic algorithms into current digital ecosystems demands considerable computational and infrastructural updates, often involving larger key sizes and increased processing overhead [10]. Organizations must also ensure crypto-agility, the capability to rapidly adapt cryptographic systems as new standards evolve or vulnerabilities are identified [11].One strategic transition approach involves hybrid cryptographic architectures, which combine conventional and quantum-safe algorithms to provide layered security during this migration period [9]. Moreover, organizations should inventory existing cryptographic assets, conduct quantum risk assessments, pilot PQC deployments, and cultivate a quantum-aware cybersecurity workforce.The threat is amplified by “harvest now, decrypt later” strategies, in which adversaries intercept encrypted data today with the intention of decrypting it once quantum capabilities mature [9]. Particularly sensitive categories — including military communications, governmental archives, personal healthcare records, and intellectual property — require immediate PQC-oriented protection.As the quantum era approaches, coordinated global action is essential to harness quantum innovation while safeguarding digital trust. Through proactive investment in research, standardization efforts, and phased post-quantum deployment, societies can preserve digital sovereignty and security resilience in the face of this technological shift [11].