{"id":3840,"date":"2026-04-01T15:09:47","date_gmt":"2026-04-01T15:09:47","guid":{"rendered":"https:\/\/itlawco.com\/?p=3840"},"modified":"2026-04-01T15:23:08","modified_gmt":"2026-04-01T15:23:08","slug":"harvest-now-decrypt-later","status":"publish","type":"post","link":"https:\/\/itlawco.com\/fr\/harvest-now-decrypt-later\/","title":{"rendered":"The \u201charvest now, decrypt later\u201d trap: is your data already compromised?"},"content":{"rendered":"\n\t\t
<\/div><\/div><\/div>
\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\n
\n\t

The most profound lesson I learnt from a SANCS26<\/a> lecture by Thomas Attema, Senior Scientist at TNO<\/a> and CWI<\/a>, is that your data may already be in jeopardy. While many view the “quantum threat” as a future concern, cybercriminals and state actors are currently engaging in “harvest now, decrypt later” (HNDL)<\/b> attacks.<\/p>\n<\/div>\n\n\n\n\n

\n\t

The immediate risk to your organisation<\/h2>\n

If your business relies on the assumption that encrypted data remains private indefinitely, you are exposed to a severe strategic liability. Right now, adversaries are intercepting and archiving your company\u2019s most sensitive long-term assets: intellectual property, financial records, and client secrets. They are not attempting to break your encryption today; they are waiting for the arrival of Q-Day<\/a>. When quantum computers reach maturity, every secure file harvested today will be rendered transparent in seconds. If your data has a shelf life of more than five years, the theft is not a future possibility: the data has likely already been taken.<\/p>\n<\/div>\n\n\n\n\n

\n\t

What is a “harvest now, decrypt later” attack?<\/h2>\n

A “harvest now, decrypt later” attack occurs when an adversary intercepts and stores encrypted data today with the intent to decrypt it once a cryptographically relevant quantum computer (CRQC)<\/b> becomes available.<\/p>\n

The encryption protecting your company\u2019s most sensitive data is currently unbreakable by today’s fastest supercomputers, which often creates a false sense of security. However, the silent threat is that the data has already been “stolen” while encrypted, awaiting a future where current encryption becomes obsolete. Think of it like this: the lock hasn\u2019t been picked yet, but the entire door has already been stolen and moved to a thief’s warehouse. The mistake is assuming that because they can\u2019t read it now, it doesn\u2019t matter that they have it.<\/p>\n<\/div>\n\n\n\n\n

\n\t

Why standard encryption is vulnerable to quantum computing<\/h2>\n

Standard encryption methods<\/a> like RSA and Elliptic Curve Cryptography (ECC) rely on mathematical foundations, such as factoring large prime numbers, that are “hard” for classical bits but “easy” for quantum qubits.<\/p>\n