Quantum computers capable of breaking RSA-2048 are projected to emerge by 2030 ± 3 years. Analysis of more than 100 primary sources indicates that 98–100% of healthcare records and 95–100% of government-classified data encrypted today are likely to face retroactive decryption under the Harvest Now, Decrypt Later (HNDL) attack model, in which adversaries collect encrypted data today and decrypt it once cryptographically relevant quantum computers become available. This paper introduces a formal time-dependent risk model that quantifies exposure as a function of data confidentiality lifetime (Ld) and attacker decryption horizon (Ha). Using the vulnerability condition Ld > Ha, we evaluate sector-specific quantum risk across healthcare, finance, government, and cloud environments, demonstrating that long-lived sensitive data faces near-certain compromise under classical public-key cryptography. The study analyzes NIST’s finalized post-quantum cryptography standards (FIPS 203–205: ML-KEM, ML-DSA, and SLH-DSA) and presents a unified five-phase migration framework addressing technical, operational, regulatory, and supply-chain constraints. Drawing on real-world deployments—including Apple iMessage PQ3, Google Chrome, Cloudflare, IBM Quantum Safe, and the U.S. Federal Government—the paper provides actionable guidance for organizations seeking to achieve 90% or greater post-quantum cryptography migration by 2030. The window for protecting long-lived data is now—not when quantum computers arrive.
Quantum computers capable of breaking RSA-2048 are projected to emerge by 2030 ± 3 years. Analysis of more than 100 primary sources indicates that 98–100% of healthcare records and 95–100% of government-classified data encrypted today are likely to face retroactive decryption under the Harvest Now, Decrypt Later (HNDL) attack model, in which adversaries collect encrypted data today and decrypt it once cryptographically relevant quantum computers become available. This paper introduces a formal time-dependent risk model that quantifies exposure as a function of data confidentiality lifetime (Ld) and attacker decryption horizon (Ha). Using the vulnerability condition Ld > Ha, we evaluate sector-specific quantum risk across healthcare, finance, government, and cloud environments, demonstrating that long-lived sensitive data faces near-certain compromise under classical public-key cryptography. The study analyzes NIST’s finalized post-quantum cryptography standards (FIPS 203–205: ML-KEM, ML-DSA, and SLH-DSA) and presents a unified five-phase migration framework addressing technical, operational, regulatory, and supply-chain constraints. Drawing on real-world deployments—including Apple iMessage PQ3, Google Chrome, Cloudflare, IBM Quantum Safe, and the U.S. Federal Government—the paper provides actionable guidance for organizations seeking to achieve 90% or greater post-quantum cryptography migration by 2030. The window for protecting long-lived data is now—not when quantum computers arrive.
Telecommunication infrastructures rely on cryptographic protocols designed for long-term confidentiality, yet data exchanged today faces future exposure when adversaries acquire quantum or large-scale computational capabilities. This harvest-now, decrypt-later (HNDL) threat transforms persistent communication records into time-dependent vulnerabilities. We model HNDL as a temporal cybersecurity risk, formalizing the adversarial process of deferred decryption and quantifying its impact across sectors with varying confidentiality requirements. Our framework evaluates how delayed post-quantum cryptography (PQC) migration amplifies exposure and how hybrid key exchange and forward-secure mechanisms mitigate it. Results show that high-retention sectors such as satellite and health networks face exposure windows extending decades under delayed PQC adoption, while hybrid and forward-secure approaches reduce this risk horizon by over two-thirds. We demonstrate that temporal exposure is a measurable function of data longevity and migration readiness, introducing a network-centric model linking quantum vulnerability to communication performance and governance. Our findings underscore the urgent need for crypto-agile infrastructures that maintain confidentiality as a continuous assurance process throughout the quantum transition.
The arrival of cryptographically relevant quantum computers (CRQCs) represents an existential threat to the public-key cryptographic infrastructure underpinning global enterprise operations. Enterprise security today relies on RSA and elliptic-curve cryptography (ECC) for TLS, VPNs, PKI, code signing, and identity systems—all of which are fundamentally broken by Shor's algorithm on a sufficiently powerful quantum computer. The defining risk is time-shifted compromise: adversaries can harvest encrypted traffic today and decrypt it once CRQCs exist, a threat already underway according to U.S. intelligence assessments. NIST finalized three post-quantum cryptographic (PQC) standards in August 2024 (FIPS 203/204/205) and mandates deprecation of quantum-vulnerable algorithms by 2035. Yet only 5% of organizations have implemented quantum-safe encryption and 95% lack formal quantum transition plans. This paper provides a comprehensive, threat-driven analysis across seven dimensions: quantum algorithm impact, harvest-now-decrypt-later (HNDL) threat models, enterprise asset risks (PKI, TLS, VPNs, code signing, cloud, IoT, identity, blockchain, supply chain), sector-specific vulnerabilities (financial services, healthcare, critical infrastructure), cryptographic primitive analysis, migration standards and roadmaps, and enterprise readiness gaps. The convergence of HNDL attacks already underway, multi-decade data sensitivity windows, and 12–15 year enterprise migration timelines means the migration deadline has, for most sectors, already passed.
Abstract A cryptographically relevant quantum computer (CRQC) would break the public-key algorithms that protect most digital communication, but the risk does not begin when such a machine is switched on. Under the harvest-now-decrypt-later (HNDL) threat model, an adversary records encrypted traffic now and decrypts it once a CRQC exists, so any data whose confidentiality must outlast the machine’s arrival is exposed from the moment it is transmitted. This scoping review maps documented data-confidentiality lifetimes, charted by data category, against post-quantum migration readiness, documented by custodian sector, and applies Mosca’s inequality to reason about which data categories are most exposed. Following the Arksey and O’Malley framework, Joanna Briggs Institute guidance, and the PRISMA Extension for Scoping Reviews, 42 sources spanning peer-reviewed literature, standards bodies, government documents, and labeled grey literature were charted. Documented confidentiality lifetimes reach decades or are effectively perpetual for national-security records, health and genomic data, biometric identifiers, and privileged legal communications, and span years to decades for financial records. Migration-readiness evidence is uneven: most developed for government and defense and for cross-industry surveys, partial for finance and telecommunications, and largely absent for health care, genomics, and the legal sector. Reasoning through Mosca’s inequality, data categories with multi-decade or indefinite confidentiality requirements are, by that logic, already exposed to HNDL, because credible expert estimates place a meaningful probability of a CRQC within the same horizon; these exposure assessments are reasoned inferences rather than measurements. The central finding is a structural mismatch between long confidentiality obligations and immature migration, compounded by a readiness evidence gap that is itself a risk.
As quantum computing technology transitions from theoretical frameworks to scalable physical implementations, the "Harvest Now, Decrypt Later" (HNDL) strategy has emerged as a primary existential threat to long-term digital security. Adversaries are currently intercepting and archiving encrypted sensitive data with the intent of performing retroactive cryptanalysis once cryptographically relevant quantum computers (CRQC) become available. This paper addresses the vulnerability of current Public Key Infrastructure (PKI), specifically RSA and Elliptic Curve Cryptography (ECC), which are susceptible to Shor’s algorithm. We propose "Aethelgard," a high-performance hybrid cryptographic framework that nests NIST-standardized Post-Quantum Cryptography (PQC), specifically ML-KEM (Kyber), within established classical key exchange protocols. By utilizing a dual-layered Key Encapsulation Mechanism (KEM), our framework ensures that data remains confidential even if one of the underlying mathematical primitives is compromised. We evaluate the framework’s efficacy through rigorous network simulations, measuring computational overhead, handshake latency, and packet fragmentation across diverse traffic profiles. Experimental results indicate that while the hybrid approach increases the public key size to approximately 1.2 KB, the overall handshake latency increases by a manageable 18% compared to classical-only protocols. This research demonstrates that hybridizing cryptographic primitives is the most viable path toward achieving immediate "crypto-agility" and mitigating the silent threat of HNDL without sacrificing the reliability of current production environments.
The advent of cryptographically relevant quantum computers (CRQCs) poses a fundamental threat to public-key cryptography securing modern digital communications. The most immediate danger is not direct decryption but the harvest-now-decrypt-later (HNDL) attack, wherein adversaries passively collect and archive encrypted traffic today for retrospective decryption once a CRQC becomes operational. This threat is structurally difficult to counter because the collection phase generates no host- or account-level signals detectable by conventional intrusion-detection systems.Simultaneously, migration to NIST-standardized post-quantum cryptography (PQC) specifically ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) introduces new vulnerabilities, including chosen-ciphertext side-channel attacks, fault-injection attacks, and protocol downgrade attacks arising during hybrid deployment periods.Existing security tooling addresses cryptographic inventory, encrypted-traffic anomaly detection, and PQC readiness as isolated problems, leaving a critical operational gap. To address this, we propose QCAD (Quantum Cryptographic Attack Detection), a unified multi-plane detection framework integrating four complementary detection planes: (A) flow-metadata behavioral analytics targeting HNDL collection indicators; (B) host- and protocol-level telemetry for PQC implementation flaws and downgrade attacks; (C) continuous crypto-agility monitoring with per-asset Mosca-inequality risk scoring; and (D) quantum-vulnerable deception canaries. These planes feed a unified correlation layer that maps observations to MITRE ATT&CK techniques and produces risk-ranked alerts.Evaluation against synthetic HNDL and PQC-attack benchmarks demonstrates that cross-plane fusion achieves a recall of 0.97 at a 5% false-positive rate (F1 = 0.90, ROC-AUC = 0.99), substantially outperforming any individual plane, confirming that no single observable captures all attack families.A key boundary condition remains: HNDL detection is inherently a probabilistic behavioral-inference problem, and interception occurring on transit infrastructure beyond the defender's perimeter may remain undetectable regardless of sensor deployment.
The imminent advent of a Cryptographically Relevant Quantum Computer (CRQC) poses an existential threat to the US financial infrastructure.Current payment rails including FedWire, CHIPS, and ACH rely on RSA and ECC standards that are mathematically vulnerable to Shor's Algorithm.This facilitates "Harvest Now, Decrypt Later" (HNDL) attacks, where encrypted data is intercepted today for future decryption.This paper evaluates the migration to NIST-standardized Post-Quantum Cryptography (PQC), specifically ML-KEM and ML-DSA.We analyze the architectural challenges of integrati ng these primitives into ISO 20022 formats, focusing on the trade-offs between increased packet size and sub-millisecond latency requirements.By proposing a phased migration framework using Hybrid Cryptographic Wrappers, this research provides a roadmap for maintaining regulatory compliance under NSM-10 while preventing a systemic collapse of digital trust and the associated multitrillion-dollar risk to the US GDP.