This study evaluates the feasibility of post-quantum cryptographic (PQC) algorithms in mitigating "Harvest Now, Decrypt Later" (HNDL) attacks as quantum computing advances threaten classical encryption. Using datasets from the NIST Post-Quantum Cryptography Project, Deloitte’s PQC Adoption Survey, and IBM & Google Quantum Roadmaps, the study applied statistical modeling, Monte Carlo simulations, and ARIMA forecasting to assess PQC security resilience, adoption readiness, and quantum decryption feasibility. The findings indicate that CRYSTALS-Kyber and CRYSTALS-Dilithium outperform RSA-2048 and ECC-256 in quantum resistance, with attack cost thresholds exceeding 1.91×10101.91 \times 10^{10}1.91×1010 compared to 2.24×1082.24 \times 10^82.24×108 for RSA-2048. Industry adoption varies, with government PQC implementation at 79%, finance at 67%, and healthcare lagging at 48%. Quantum decryption probability remains negligible until 2029 but rises to 78.6% by 2033. This study addresses the critical challenge of post-quantum cryptographic (PQC) adoption amid growing quantum threats, particularly "Harvest Now, Decrypt Later" (HNDL) attacks. By evaluating PQC security resilience, industry adoption, and quantum decryption feasibility, the findings provide strategic insights for policymakers and cybersecurity experts. Highlighting the vulnerabilities of CRYSTALS-Kyber to side-channel attacks, this research underscores the need for continuous cryptanalysis, hybrid encryption models, and adaptive security frameworks to future-proof data.Organizations must accelerate PQC adoption, integrate hybrid cryptographic models, enforce regulatory policies, and sustain cryptanalysis efforts to ensure long-term security.
This study evaluates the feasibility of post-quantum cryptographic (PQC) algorithms in mitigating "Harvest Now, Decrypt Later" (HNDL) attacks as quantum computing advances threaten classical encryption. Using datasets from the NIST Post-Quantum Cryptography Project, Deloitte’s PQC Adoption Survey, and IBM & Google Quantum Roadmaps, the study applied statistical modeling, Monte Carlo simulations, and ARIMA forecasting to assess PQC security resilience, adoption readiness, and quantum decryption feasibility. The findings indicate that CRYSTALS-Kyber and CRYSTALS-Dilithium outperform RSA-2048 and ECC-256 in quantum resistance, with attack cost thresholds exceeding 1.91×10101.91 \times 10^{10}1.91×1010 compared to 2.24×1082.24 \times 10^82.24×108 for RSA-2048. Industry adoption varies, with government PQC implementation at 79%, finance at 67%, and healthcare lagging at 48%. Quantum decryption probability remains negligible until 2029 but rises to 78.6% by 2033. This study addresses the critical challenge of post-quantum cryptographic (PQC) adoption amid growing quantum threats, particularly "Harvest Now, Decrypt Later" (HNDL) attacks. By evaluating PQC security resilience, industry adoption, and quantum decryption feasibility, the findings provide strategic insights for policymakers and cybersecurity experts. Highlighting the vulnerabilities of CRYSTALS-Kyber to side-channel attacks, this research underscores the need for continuous cryptanalysis, hybrid encryption models, and adaptive security frameworks to future-proof data.Organizations must accelerate PQC adoption, integrate hybrid cryptographic models, enforce regulatory policies, and sustain cryptanalysis efforts to ensure long-term security.
My research focuses on developing a post-quantum cryptography (PQC) framework for securing institutional email systems against future quantum computing threats, particularly the Harvest-Now, Decrypt-Later (HNDL) attack. The study addresses a critical cybersecurity challenge faced by governments, healthcare institutions, universities, and organizations that rely on long-term confidentiality of sensitive communications.The proposed framework integrates the NIST-standardized ML-KEM-768 (formerly CRYSTALS-Kyber) for key encapsulation and ML-DSA-65 (formerly CRYSTALS-Dilithium) for digital signatures to provide quantum-resistant encryption and authentication. A hybrid cryptographic architecture combines PQC with AES-256-GCM to secure email content while maintaining compatibility with existing communication systems.A prototype was implemented using the Open Quantum Safe (liboqs v0.15.0) library and evaluated on resource-constrained hardware representative of institutions in developing countries (3-core Intel Core i5 processor and 4 GB RAM). Performance was measured over 100 benchmark iterations, comparing PQC algorithms with traditional RSA-2048 and ECDSA. The results showed that ML-KEM-768 achieved significantly faster key generation than RSA-2048 while maintaining low computational overhead, requiring less than 2% CPU utilization, under 8 MB of memory, and an end-to-end email processing latency of only 11–16 ms.The research introduces a formally specified HNDL threat model, evaluates the security implications of quantum-resistant cryptography in constrained environments, and discusses deployment considerations including certificate management, side-channel resistance, hybrid migration strategies, and institutional adoption. The work also identifies current limitations, such as the absence of forward secrecy and live production deployment, and proposes future enhancements including PQC-based key ratcheting, TLS integration, and real-world pilot deployments.This research contributes an end-to-end, standards-aligned, open-source framework demonstrating that post-quantum email security is practical and computationally feasible for resource-constrained institutions, particularly in developing economies, providing a pathway toward secure communication infrastructures resilient to future quantum attacks.
This paper provides a comprehensive review of quantum readiness as a critical, multidimensional framework for navigating the upcoming quantum computing era. It addresses the imminent threat posed by cryptographically relevant quantum computers (CRQCs), which will be capable of breaking the public-key cryptographic systems (like RSA and ECC) that currently secure digital communications and e-commerce. The concept of ”harvest now, decrypt later” (HNDL), where adversaries collect encrypted data today to decrypt it once quantum computers are available, highlights the urgency of this transition. The review is structured around three key dimensions: the theoretical foundations of post-quantum cryptography (PQC), global standardization efforts, and real-world sectoral implementations. It discusses how quantum algorithms, specifically Shor’s and Grover’s algorithms, can render classical cryptography obsolete, and it analyzes the NIST Post-Quantum Cryptography Standardization Project, which has selected the first-generation PQC standards. The paper also examines strategies from the European Union and other nations, noting the geopolitical implications of standards fragmentation. Furthermore, the review explores the practical adoption of PQC in critical sectors like finance, telecommunications, and defense, emphasizing the importance of crypto-agility—the ability to rapidly switch cryptographic algorithms—for future-proofing systems. It also highlights open challenges, including performance overheads, legacy system migration, and the shortage of skilled professionals. The paper concludes by outlining future directions for a secure transition, advocating for continuous research, global collaboration, and sustained investment to build a quantum-resilient digital ecosystem.
The imminent threat posed by the realization of large-scale, fault-tolerant quantum computers (QCs), capable of leveraging Shor's algorithm to break foundational classical public-key cryptosystems like RSA and ECC, necessitates an immediate and comprehensive shift to Post-Quantum Cryptography (PQC). This urgency is intensified by the "Harvest Now, Decrypt Later" (HNDL) threat, which compromises long-term data confidentiality. The NIST PQC Standardization process has established Lattice-Based Cryptography as the leading family for new standards. This paper presents a comprehensive comparative analysis of major PQC schemes built upon the foundational mathematical problem, Learning with Errors (LWE). We systematically evaluate these LWE-based schemes (CRYSTALS-Kyber, CRYSTALS-Dilithium) by balancing three critical dimensions: cryptographic security (against classical and quantum attacks), efficiency metrics (key size, signature size, and operational speed), and implementation feasibility across diverse hardware environments. Our findings provide essential insights and a structured framework to guide engineers, policy-makers, and organizations in making informed decisions for the strategic and secure migration to quantum-resistant standards in the post-quantum transition era.
Quantum computers capable of breaking RSA-2048 are projected to emerge by 2030 ± 3 years. Analysis of more than 100 primary sources indicates that 98–100% of healthcare records and 95–100% of government-classified data encrypted today are likely to face retroactive decryption under the Harvest Now, Decrypt Later (HNDL) attack model, in which adversaries collect encrypted data today and decrypt it once cryptographically relevant quantum computers become available. This paper introduces a formal time-dependent risk model that quantifies exposure as a function of data confidentiality lifetime (Ld) and attacker decryption horizon (Ha). Using the vulnerability condition Ld > Ha, we evaluate sector-specific quantum risk across healthcare, finance, government, and cloud environments, demonstrating that long-lived sensitive data faces near-certain compromise under classical public-key cryptography. The study analyzes NIST’s finalized post-quantum cryptography standards (FIPS 203–205: ML-KEM, ML-DSA, and SLH-DSA) and presents a unified five-phase migration framework addressing technical, operational, regulatory, and supply-chain constraints. Drawing on real-world deployments—including Apple iMessage PQ3, Google Chrome, Cloudflare, IBM Quantum Safe, and the U.S. Federal Government—the paper provides actionable guidance for organizations seeking to achieve 90% or greater post-quantum cryptography migration by 2030. The window for protecting long-lived data is now—not when quantum computers arrive.
Purpose: The purpose of this paper is to examine the emerging threat that large-scale quantum computing poses to classical public-key cryptographic systems, particularly RSA and Elliptic Curve Cryptography (ECC), which form the backbone of contemporary digital security infrastructures. In response to this threat, the study aims to analyze post-quantum cryptography (PQC) as a viable long-term solution capable of resisting both classical and quantum adversaries. The paper further seeks to assess the urgency of PQC adoption in light of the “harvest now, decrypt later” threat model and to evaluate the practical readiness of quantum-safe cryptographic algorithms currently under consideration by the National Institute of Standards and Technology (NIST). Materials and Methods: This study employs a qualitative and analytical research methodology grounded in an extensive review of authoritative sources, including NIST’s post-quantum cryptography standardization documents, recent academic literature, industry white papers, and policy reports from organizations such as RAND Corporation and Cloudflare. The analysis systematically surveys major families of post-quantum cryptographic algorithms namely lattice-based, code-based, and hash-based schemes and evaluates them based on security assumptions, computational efficiency, implementation complexity, and standardization maturity. Findings: The analysis indicates that Lattice-based cryptographic schemes demonstrate the highest maturity and practical readiness, evidenced by their selection in NIST’s PQC process. Code- and hash-based methods provide strong security but face key size and performance challenges. The lack of scalable quantum computers does not reduce urgency, as data harvesting persists. Artificial intelligence emerges as a key enabler for accelerating PQC adoption. Unique Contribution to Theory, Practice and Policy: The paper recommends a proactive, phased post-quantum migration using hybrid cryptographic architectures. Organizations should conduct inventories, benchmarking, and pilot deployments aligned with NIST standards. AI-driven tools are advised to improve key management and reduce complexity. Continued interdisciplinary research and policy support are encouraged to ensure a secure, scalable transition to quantum-resistant security systems.
Quantum computing is rapidly advancing and threatens the cryptographic systems that secure digital communications. Classical cryptosystems, such as RSA and ECC, rely on mathematical problems that are difficult for classical computers but can be solved easily by quantum algorithms, such as Shor’s. This challenge underscores the pressing need for Post-Quantum Cryptography (PQC) to safeguard data against both classical and quantum threats. This study provides a comprehensive review of PQC Approaches in securing data against quantum threats by analyzing reviewed journals, conference proceedings, book chapters, and websites. Several researchers reviewed relevant literature published between 2019 and 2026 using the ACM Digital Library, Wiley Online Library, Taylor & Francis, Springer, ScienceDirect, MDPI, IEEE Xplore Digital Library, and Google Scholar. The review evaluates lattice-based, code-based, Hash-based, multivariate, and isogeny-based schemes across security strength, performance, interoperability, and deployment feasibility in heterogeneous environments, including cloud platforms and Internet of Things devices. The findings indicate that lattice-based schemes, particularly CRYSTALS-Kyber and CRYSTALS-Dilithium, currently offer the most balanced trade-off between efficiency and quantum resistance, while Hash-based schemes such as SPHINCS+ prioritize conservative security at notable performance cost. Code-based approaches, including McEliece, demonstrate strong long-term security but remain constrained by large key sizes. The review highlights implementation, energy, migration, and governance barriers that must be addressed before adoption. The review concludes by emphasizing that transitioning to PQC requires a collaborative effort from academia, industry, and government. Future research should focus on integrating lightweight PQC in IoT, 5G/6G, and cloud environments, as well as developing hybrid models that combine classical and quantum-safe systems. Addressing these issues is crucial for establishing secure data protection in the quantum era.