Opinion: Organizations Risk Exposure by Delaying Post-Quantum Cryptography Migration
This is an opinion piece by Tim Hudson, President of OpenSSL Corporation, arguing that organisations should not wait for cryptographically-relevant quantum computers to arrive before preparing their cryptographic infrastructure. The author stresses that cryptographic discovery (identifying where and how cryptography is used) is the first and most time-consuming step, and that 'harvest now, decrypt later' attacks mean encrypted data captured today could be exposed once quantum computing matures. The piece references OpenSSL Library 3.5's support for NIST-standardised ML-KEM, ML-DSA and SLH-DSA algorithms, discusses hybrid classical/post-quantum approaches, and advocates for building long-term cryptographic agility rather than targeting a single migration date. There is no specific vulnerability, incident, exploitation, or breach described; this is a strategic/awareness article aimed at CISOs and security architects.
Linha do tempo
-
Opinion: Organizations Risk Exposure by Delaying Post-Quantum Cryptography Migration
ler a análise desta fonte ocultar
This is an opinion piece by Tim Hudson, President of OpenSSL Corporation, arguing that organisations should not wait for cryptographically-relevant quantum computers to arrive before preparing their cryptographic infrastructure. The author stresses that cryptographic discovery (identifying where and how cryptography is used) is the first and most time-consuming step, and that 'harvest now, decrypt later' attacks mean encrypted data captured today could be exposed once quantum computing matures. The piece references OpenSSL Library 3.5's support for NIST-standardised ML-KEM, ML-DSA and SLH-DSA algorithms, discusses hybrid classical/post-quantum approaches, and advocates for building long-term cryptographic agility rather than targeting a single migration date. There is no specific vulnerability, incident, exploitation, or breach described; this is a strategic/awareness article aimed at CISOs and security architects.