Harvest Now, Decrypt Later: The Threat That Starts Today

The most widely misunderstood aspect of the quantum threat is its timing. Many organizations assume they can wait until quantum computers are demonstrably capable before acting. That assumption is wrong, and understanding why is central to building a credible post-quantum strategy.

What Is Harvest Now, Decrypt Later?

Harvest now, decrypt later (HNDL) is a straightforward strategy: intercept and archive encrypted data today using classical infrastructure, then decrypt it once a quantum computer capable of breaking classical public-key cryptography becomes available. The attack requires no quantum hardware at collection time. The collection phase is passive, scalable, and undetectable by the organizations being targeted.

Nation-state intelligence agencies, in particular, have both the technical capability and the organizational patience to operate on these timescales. Encrypting communications today using RSA or ECDH does not protect you against an adversary who can store the ciphertext for a decade.

Which Data Is Most Exposed?

The defining variable is confidentiality lifetime: how long does the data need to remain secret? The longer the required lifetime, the higher the harvest-now risk.

• Government and diplomatic communications expected to remain classified for decades
• Medical records subject to decades-long retention and privacy requirements
• Intellectual property, trade secrets, and R&D that retains competitive value for years
• Financial archives and transaction records with long audit retention periods
• Legal and regulatory filings that establish long-term rights and obligations
• Infrastructure configuration, authentication credentials, and cryptographic key material

What Does This Mean for Migration Urgency?

The HNDL threat inverts the usual risk calculus. Normally, you adopt a control when the threat is realized. Here, you must adopt the control before the threat is realized, because by the time quantum capability arrives, the window to protect already-harvested data has closed.

CISA, NSA, and NIST have each explicitly cited HNDL as a rationale for beginning migration now rather than waiting for quantum hardware to mature. Their guidance is not speculative; it reflects a threat that is operationally underway.

Immediate Steps to Reduce Exposure

• Identify data with confidentiality lifetimes exceeding five to ten years and prioritize it for early migration
• Inventory where quantum-vulnerable public-key cryptography is used in key exchange and authentication
• Deploy hybrid TLS (classical plus ML-KEM) for communications protecting high-sensitivity data flows
• Review archive encryption key management to ensure key wrapping uses quantum-safe algorithms
• Begin building a cryptographic inventory so you know the full scope of your exposure

The harvest-now window is open right now. Closing it requires action before quantum computers arrive, not after. Organizations that understand this dynamic treat post-quantum migration as an active risk management decision, not a future technology project.