Harvest Now, Decrypt Later: The Looming Threat

"Harvest now, decrypt later" is the single most important concept for understanding why the quantum threat is urgent today, even though no quantum computer yet exists. It reframes the timeline entirely.

The Concept

Adversaries — nation-states, well-funded criminal groups — are recording encrypted traffic now. They cannot read it today. But they store it, waiting for the day a sufficiently powerful quantum computer can break the key exchange and decrypt it.

This means data encrypted with RSA or ECDH today is not safe "until a quantum computer appears" — it is safe only for the gap between now and that appearance, minus the time the ciphertext has already been stored.

Why It Changes the Timeline

If a quantum computer arrives in 2035, but your data must stay confidential until 2050, then data encrypted in 2026 is already at risk. The adversary has 15 years to wait, and your data has a 15-year confidentiality requirement beyond that.

The relevant question is no longer "when will quantum computers arrive?" but "how long must my data stay confidential, and is that longer than the time until a quantum computer?"

Who Is at Risk

• Governments: diplomatic cables, intelligence, classified communications.
• Healthcare: patient records with lifelong confidentiality.
• Finance: long-term contracts, trade secrets, M&A data.
• Legal: privileged communications, case strategy.
• IP-heavy firms: trade secrets, formulas, designs.
• Individuals: private messages, financial documents, identity data.

What Is Being Harvested

• TLS handshakes and encrypted web traffic intercepted at backbone points.
• VPN sessions recorded at network exits.
• Encrypted emails stored on compromised or coerced mail servers.
• Encrypted files obtained through lawful or unlawful access.

The Counter-Argument and Its Flaws

Some argue the threat is overblown because a quantum computer may be decades away. But:

• The arrival date is uncertain; conservative estimates are 2030-2035, and some are sooner.
• Even a 20-year horizon threatens data with 30+ year confidentiality needs.
• The cost of protection now is far lower than the cost of a retroactive breach.

How to Defend Against Harvest-Now-Decrypt-Later

1. Upgrade key exchange to hybrid post-quantum (ECDH + ML-KEM) so recorded handshakes cannot be decrypted even by a quantum computer.
2. Use strong symmetric encryption (AES-256) for data at rest — it is quantum-resistant.
3. Encrypt sensitive files independently with a tool like CryptShield before transmitting, so even if the transport layer is later broken, the file content remains protected.
4. Minimise long-term storage of sensitive plaintext.
5. Apply forward secrecy so each session uses fresh keys.

Bottom Line

Harvest-now-decrypt-later means the quantum threat is not a future problem — it is a present one. Every day that long-lived data is protected only by RSA or ECC is a day that data is being collected against a future decryption. The only defence is to protect that data with quantum-resistant cryptography now.