The Quantum Clock Is Ticking. Could Your Encryption Change in Time?

For years, conversations about quantum security often started with the same question:

When will a cryptographically relevant quantum computer arrive?

It is an understandable question; but increasingly, it is the wrong one.

Organizations do not need to know the exact date on which today’s public-key cryptography becomes vulnerable before they start preparing. The standards are already emerging, migration timelines are taking shape, and the cryptographic infrastructure businesses depend on today may take years to discover, update and replace.

Quantum readiness therefore starts with a different question:

If you had to replace RSA and elliptic-curve cryptography across your organization, how long would it take?

Your answer is your real clock.

Your clock started before the quantum computer

Two factors set your deadline.

The first is data lifetime. Attackers can collect encrypted data today and decrypt it once quantum hardware is powerful enough.

This is known as "harvest now, decrypt later." Many organizations hold data that must stay confidential for ten years or more. If it is protected by RSA or elliptic-curve cryptography today, it is already exposed to this risk.

The second is migration time. Replacing cryptography across a large organization can take years.
Add the two together and compare the result with the threat horizon. For many organizations, that sum leaves little room for waiting.

In 2024, NIST finalized its first three post-quantum cryptography standards: FIPS 203 for ML-KEM, FIPS 204 for ML-DSA and FIPS 205 for SLH-DSA. NIST now states explicitly that organizations should begin migrating and that these standards are ready for implementation. 

Europe is moving in the same direction.

The EU’s coordinated roadmap for the transition to post-quantum cryptography calls on Member States to start transitioning by the end of 2026, while high-risk use cases should move to PQC as soon as possible and no later than the end of 2030. 
The question, then, is no longer whether organizations should prepare.

It is how.

Readiness starts with knowing what you depend on

Cryptography is embedded deeply across modern infrastructure.

It protects machine and user identities, establishes secure communications, signs software and documents, supports PKI, authenticates systems and protects sensitive information.

That creates a practical challenge: many organizations do not have a complete picture of where vulnerable public-key algorithms are being used.

Before migration can begin, organizations need visibility into their cryptographic dependencies:

• Which applications still rely on RSA or elliptic-curve cryptography?
• Which certificates, protocols and signing processes depend on them?
• Which systems protect information that must remain confidential for many years?

Migration without that visibility becomes guesswork.

Not everything needs to move at once

Quantum readiness is also a prioritization exercise.

A short-lived internal connection does not necessarily carry the same risk as a root of trust, a long-lived signing key or information that must remain confidential for decades.

That is why a risk-based migration strategy matters.

The EU’s most recent feedback on its PQC roadmap highlighted exactly this: respondents valued clear milestones, risk-based prioritization, hybrid approaches and crypto-agility as important elements of a workable transition. 

The objective is not to replace every cryptographic mechanism overnight.

It is to know what must move first, what can follow later, and how the infrastructure will support both during the transition.

Crypto-agility may be the real measure of readiness

Standards will continue to evolve.

Algorithms may be added, implementations will mature, and requirements will differ across industries and jurisdictions.

That makes quantum readiness bigger than selecting a PQC algorithm.

It means designing cryptographic infrastructure so algorithms and mechanisms can evolve without forcing organizations to redesign every application or replace every security component around them.

This is where hardware security modules and centralized key management become strategically important.

The HSM remains the protected trust boundary for sensitive keys and cryptographic operations, while the algorithms used inside that trust boundary can evolve.

For example, Utimaco’s Quantum Protect package brings ML-KEM and ML-DSA support to the u.trust General Purpose HSM and is designed for in-field upgrade rather than requiring an HSM replacement. A simulator also enables organizations to evaluate and integrate PQC mechanisms before production deployment. 

That is crypto-agility in practical terms:

keep the trust architecture , evolve the cryptography underneath it.

Testing is part of readiness

PQC migration is not simply a configuration change.

New algorithms can introduce different key sizes, signature sizes, performance characteristics and integration requirements. Applications, protocols and operational processes therefore need to be tested.

A quantum-readiness plan should move through four concrete stages:

• Discover where cryptography is used.
• Prioritize systems according to risk and data lifetime.
• Test standardized PQC in real applications and workflows.
• Build crypto-agility so the next algorithm transition is easier than the last.

That is far more actionable than waiting for a prediction about Q-Day.

Start before urgency becomes disruption

Quantum readiness does not mean replacing today’s cryptography tomorrow.
It means making sure that when cryptography must change, your organization is not discovering its dependencies for the first time.

The standards exist. The transition has started. The next step is to understand whether your infrastructure can evolve with it.

Ready to test your PQC transition?

Explore Utimaco Free Quantum Protect simulator and start evaluating post-quantum algorithms within a hardware-backed cryptographic environment.

Because being quantum-ready is not about knowing exactly when the future arrives. It is about being able to adapt when it does.

About the Author

Amani Karchoud

Product Marketing Manager, Utimaco