Threat model
'Harvest now, decrypt later': attacker records encrypted traffic today, decrypts when quantum computer arrives. Long-term secrets at risk NOW.
Advertisement
Hybrid deployments
Combine classical (ECDHE) + PQ (Kyber). Vulnerable only if BOTH broken. Chrome + Cloudflare shipping 2024+.
Advertisement
Timeline
Cryptographically relevant quantum computer: 15-30 years typical estimate. Migration takes 5-10+ years. Start now.
Crypto-agility
Design systems to swap algorithms without breaking. Version negotiation. Algorithm identifiers. Modular libraries.