Contents
In brief
The action is an inventory of cryptography and a preference for agility. It is not a bet on a qubit headline.
Original CloudExchangers explainer. It describes established public practice and labels the desk’s judgment as analysis. It is not a report of a newly announced event.
Start from the data, not the device
A future quantum computer that can run Shor’s algorithm at cryptographic sizes would threaten widely used public-key algorithms. NIST’s response has been to standardize replacements. That is the public fact a security program can use. The program does not need to predict the Tuesday the machine arrives. It needs to know which of its secrets would still matter on that Tuesday.
Recorded traffic can be stored now and decrypted later if the key exchange falls. That is the harvest-now-decrypt-later concern. It applies to information with a long confidentiality requirement. It applies weakly, or not at all, to a session whose value expires in an hour. Mixing those cases produces either panic or complacency.