OPINION | Quantum threat is real and imminent: You should be ready to face it

Representative image

Modern problems need modern solutions. Similarly, quantum problems require quantum solutions: there is no alternative to addressing a quantum threat without quantum security.

Racing against the clock, India as a nation has understood the urgency and launched the National Quantum Mission, a ₹6,000+ crore initiative.

Additionally, India’s leading cybersecurity companies have started solving real-world security challenges with quantum-safe encryption for enterprises. Many global organisations have also initiated their PQC exploration. 

Therefore, the threat is real and imminent, as many cybersecurity experts agree. 

Understanding the quantum threat 

The existing IT infrastructure heavily relies on the RSA 2048 or ECC algorithm, which cannot be feasibly cracked or breached by currently available computers, as it is a laborious, time-consuming, and resource-intensive task.

However, with quantum computers, it is all about a matter of seconds. Once quantum computers are commercially available, hackers can breach and break existing algorithms more easily than ever before.  

On the other hand, the attackers are no longer waiting for quantum computers. They have already started downloading the information, though they cannot crack it now. 

Through the ‘Harvest Now Decrypt Later’ (HNDL) strategy, cyber adversaries store our data and use it later. Once they have access to quantum computers, they will be able to penetrate and access them. 

All customer data, organisational information, financial records, government intelligence, military assets, and confidential communications are already downloaded and kept for decryption. 

This situation poses a threat that every individual, organisation, enterprise, and government body should be concerned about. 

Who will be affected by quantum attacks?

Every single citizen. Every organisation. Even the governments. Quantum threat is no longer an IT problem; it is a national security imperative.  

Industries that handle sensitive and classified data are under the radar of cyber attackers (BFSI, Defence, Telecommunications, Healthcare, Automobile, Data centres, bigger product-driven enterprises, Governments, even larger service-based companies, and more). 

When to expect a quantum attack? 

The threat is ON, as the attackers have our encrypted data for future use. Not only is our future at risk, but our past records, information, and communications are also vulnerable to exposure.

According to Gartner, by 2025, 60 per cent of regulated entities will require quantum-safe encryption. 

The United Nations has announced this year as the International Year of Quantum Science and Technology. Between 2025 and 2027 is the optimal time for transitioning to avoid quantum risks.

NIST has also defined the post-quantum cryptography standards.

IBM has already announced its 1,386-qubit multi-chip quantum processor named Kookaburra.

The US and China have reached a critical point in their development of quantum servers and quantum internet, respectively.

Waiting any longer for enterprises is not a choice, and it is highly recommended to proactively adopt quantum cryptography and avoid retrofitting after an attack is faced.

How to prepare for quantum threats? 

Before quantum computing shatters the security systems, we must prepare for the quantum era. 

Step 1: Audit cryptographic inventories to understand the sensitivity of your data, where it is stored, and the encryption methods used.  

Step 2: A plan for quantum migration should be added to the pipeline, as it is a complex process. Starting today is the best choice. 

Step 3: Become crypto-agile to ensure the system is in place to switch completely when the quantum threat reaches. 

Partner with quantum security providers who offer both hardware and software end-to-end quantum solutions. Ensure that the quantum solutions primarily utilise plug-and-play models without disrupting the existing architecture or setup.

Most quantum products are industry-agnostic, meaning they apply to all major industries for their exclusive purposes and benefits. 

Get started with quantum preparation 

Early adoption of quantum security leads to lower risk exposure, higher compliance readiness, and stronger customer trust. Being quantum-resilient is more than technology, as it requires strategy, speed, and systemic coordination. 

Countries are making bold moves, but cyber adversaries are also taking similar steps. Hence, organisations must swiftly and decisively gain digital sovereignty in a world where traditional cyber defences will not hold.

The author is the co-founder and CEO of QNu Labs, which deals with quantum cryptography, encryption, and communication products and solutions.

The opinions expressed in this article are those of the author and do not purport to reflect the opinions or views of THE WEEK.

Sci/Tech