Quantum Threat: When Should We Migrate?

The "harvest now, decrypt later" paradigm makes the migration to post-quantum cryptography urgent. Sensitive data intercepted today can be decrypted when sufficiently powerful quantum computers become available.

Current estimates point to 2030-2035 as the likely window for cryptographically relevant quantum computers. Considering that enterprise cryptographic migrations take 3-5 years, the time to start is now.

The hybrid approach (ML-KEM + X25519) recommended by NIST SP 800-227 offers security against both classical and quantum attacks simultaneously, enabling a gradual transition without risks.