World Quantum Readiness Day — September 23, 2027

In 2027, this crucial observance will be held on Thursday, September 23. This day provides another opportunity to accelerate the global transition to quantum-safe cryptographic standards and protect sensitive information.

The urgency of quantum readiness stems from the accelerating development of quantum computing. Without a timely transition to Post-Quantum Cryptography (PQC), data encrypted today could be retroactively decrypted by quantum adversaries in the future, posing an unprecedented threat to global cybersecurity.

There’s some uncertainty around advancements in quantum computing capabilities. We know the technology is rapidly progressing toward the point when quantum computers will be capable of breaking today’s proven algorithms, but we don’t know when that will be. This is partially because quantum R&D is underway all around the world at private companies, public institutions, and government agencies. It’s also because the properties of quantum states are exceptionally nuanced and difficult to control, so predicting how a particular computer will behave is less exact than in other forms of computer engineering.

This uncertainty means that the moment when a quantum computer reaches the point where it’s powerful enough to break today’s algorithms could be years away, or it could be months away. Organizations need to understand that testing, integrating, and implementing sustainable quantum protections take time. This is a new kind of threat. Anyone who adopts the mentality that quantum is far over the horizon may be caught unprepared when PQC implementation timelines overrun advancements in quantum computing.

The best recommendation of top cybersecurity experts: it’s better to be ready earlier than needed than wait for developments to close in on widespread decryption and find out too late there isn’t enough time to protect your critical data.

Post-Quantum Cryptography (PQC) is any algorithm that has met industry and government standards for stopping quantum computers from decrypting secure data. These standards are based on an open call for proposed algorithms, a rigorous multi-year testing period by top cybersecurity and technology experts, and final adjustments. Four PQC algorithms have met the standard through the first round, with more in public review.

To be considered true PQC, a security algorithm must protect against quantum attacks, possess the capability to be retrofitted onto existing data and code, and must be light enough to run alongside classical computing security algorithms without burdening systems.

HNDL is the official designation for a type of attack where a party steals encrypted data now, knowing it would be impossible to decrypt using classical computers. This party holds the decrypted data in storage, anticipating a day when quantum computing will allow them to decrypt that longtime-secured data using quantum breaking.

<span style=”font-weight: 400;”>Experts have raised alarms about this for two major reasons: </span>
<ol>
<li style=”font-weight: 400;” aria-level=”1″><span style=”font-weight: 400;”>Harvest Now, Decrypt Later thefts may already be underway and even responsive IT teams may not realize how much of their data could soon be in the hands of people who can access it in the future.</span></li>
<li style=”font-weight: 400;” aria-level=”1″><span style=”font-weight: 400;”>There’s no retroactive time limit on the effectiveness of HNDL, so data that has been proven to be secure for years or decades may be hacked under this method. Some of the most critical data in the world, long thought to be in an “unbreakable vault” could be stolen, held, and decrypted by quantum computers in the future.</span></li>
</ol>
The only way to combat Harvest Now, Decrypt Later is to begin protecting all data with PQC, in order of priority, according to what’s most critical and will need to be shielded the longest against quantum threats.