Foundations: Understanding the Quantum Threat
§ 01The encryption protecting virtually all sensitive data today — TLS, RSA, ECC — is built on mathematical problems that are easy to compute in one direction but practically impossible to reverse with classical computers. RSA's security depends entirely on the computational infeasibility of factoring a very large number into its two prime components.
A quantum computer operates on fundamentally different physical principles. In 1994, Peter Shor published an algorithm that can solve the integer factorisation problem in polynomial time on a quantum computer. A cryptographically relevant quantum computer (CRQC) would instantly render obsolete the encryption protecting all HTTPS traffic, all VPN communications, all encrypted email, all digital signatures, and essentially all public-key cryptography currently in widespread use.
Any organisation handling data that needs to remain confidential for 10+ years has a quantum security problem today. Any organisation whose infrastructure will still be operational in 2030 has a quantum security problem today.
The Harvest Now, Decrypt Later Threat
§ 02The HNDL threat is unique because it removes time as a defender's advantage. Old passwords expire; old credit card numbers get cancelled. But harvested encrypted diplomatic cables, clinical trial data, and intellectual property do not lose their value — they may be more valuable in the future than today.
The NIST Post-Quantum Cryptography Standards
§ 03In 2024, NIST finalised the first set of Post-Quantum Cryptography (PQC) standards — a landmark event that should have triggered urgent action across every industry. The migration is not optional; the question is whether your organisation gets ahead of it or faces an emergency scramble.
NIST's primary standard for key encapsulation and encryption. Based on the Module Learning With Errors problem, replacing RSA and ECDH in protocols like TLS. Already deployed by Google, Cloudflare, and major cloud providers.
Quantum-resistant digital signatures replacing RSA-based and ECDSA-based signatures. Verifies identity, authenticates software, and ensures data integrity with a lattice-based alternative resistant to quantum attacks.
A hash-based alternative to ML-DSA, relying on the security of cryptographic hash functions rather than factorisation. More conservative with a longer analysis history. Recommended as a backup for high-assurance applications.
Cryptographic Agility: The Infrastructure Challenge
§ 04Before migrating, organisations need to understand the state of their existing cryptographic infrastructure. For most organisations, this is where the challenge becomes clear. Cryptographic implementations are typically hardcoded in application code, baked into hardware firmware, embedded in protocols, locked into vendor products, and distributed across complex dependency chains.
The Symmetric Encryption Clarification
§ 05Symmetric encryption algorithms like AES are not broken by quantum computers in the same way as public-key cryptography. Grover's Algorithm provides only a quadratic speedup — effectively halving the key length. The immediate quantum security challenge is concentrated in key exchange and digital signatures.
A near-term approach is hybrid cryptography — using classical and post-quantum algorithms together. If the classical algorithm is broken by a quantum computer, the PQC component still provides security. Google, Cloudflare, and AWS have already deployed hybrid PQC/classical in their infrastructure.
Sector-Specific Risk: Who Must Move Fastest
§ 07Not all organisations face equal quantum security risk. Urgency depends on data longevity, nation-state interest, regulatory obligations, and the operational lifetime of current cryptographic infrastructure.
- Government & Defence
- Healthcare & Pharma
- Financial Services & Banking
- Critical Infrastructure
- IP-Intensive Research
- Technology
- Legal, Accounting & Consulting
- Telecommunications
- Media & Entertainment
- Consumer Goods
- Retail
- Hospitality
- Focus on protecting customer PII & payment data
Building Your Post-Quantum Readiness Programme
§ 08Here is a practical programme framework for organisations beginning the PQC journey. Executive sponsorship is essential — this is an enterprise-wide programme, not a security team project.
1
- Board-level briefing on HNDL threat and quantum timeline
- Secure executive sponsorship and investment approval
- Establish regulatory and insurance context for leadership
1–3
- Inventory all TLS/code-signing certificates, VPN keys, SSH keys, PKI
- Map all key exchange and digital signature usage
- Identify IoT device identity and embedded crypto
2–4
- Rank assets by data sensitivity, longevity, and attack surface
- Produce prioritised migration roadmap
9–18
- Deploy ML-KEM hybrid TLS for all public-facing HTTPS
- Migrate publicly-accessible APIs to PQC-hybrid TLS
- Update TLS certificate management for PQC readiness
12–24
- Migrate internal TLS to PQC-hybrid
- Update PKI to support PQC certificate issuance
- Migrate code signing to ML-DSA
18–36
- Re-encrypt high-sensitivity data with PQC key protection
- Update backup encryption to PQC
- Migrate document and archive signing to PQC
24–48
- Identify and remediate remaining RSA and ECDSA usage
- Decommission legacy cryptographic infrastructure
- Validate complete PQC coverage across the technology estate
The Regulatory Horizon
§ 09For organisations in regulated industries, PQC migration is moving from best practice to regulatory requirement. Early movers will meet requirements comfortably; late movers will face expensive scrambles.
The Bottom Line
§ 11The quantum threat is not waiting for you to be ready. Consider what we know with certainty:
Beyond data confidentiality, quantum computers could forge software updates, TLS certificates, financial transaction authorisations, and code signing certificates. The migration to PQC digital signatures is arguably even more urgent than data encryption — it is the foundation of digital trust itself.
The encrypted data you are generating today may already be in an attacker's archive, waiting. The time to start your quantum security programme is not when you see the threat clearly in the headlines. The time is now.
— Woollemia Infosec · +91 7760504273 / +91 9686227978 · info@woollemia.com