Quantum Use Case #69: Long-term archives for regulated industries

Short answer: This use case addresses the protection of data requiring multi-decade confidentiality, such as archives, backups, and regulated personal records, against future decryption by cryptographically relevant quantum computers. It is a realistic planning concern because current public-key primitives may be insufficient if the data's required confidentiality lifetime exceeds the time until such machines exist. Researchers have proposed using Mosca’s inequality to identify which data categories are most exposed under the "harvest now, decrypt later" threat model.

The Harvest-Now-Decrypt-Later Threat

The primary risk to long-term archives is not immediate decryption but the "harvest now, decrypt later" (HNDL) threat model. In this scenario, an adversary records encrypted traffic today and stores it, intending to decrypt it once a cryptographically relevant quantum computer (CRQC) becomes available. Consequently, any data whose confidentiality must outlast the arrival of such a machine is exposed from the moment it is transmitted. The risk does not begin when a quantum machine is switched on; rather, it begins when data with long-term confidentiality requirements is encrypted using current public-key algorithms.

This threat model applies specifically to data categories where the requirement for secrecy extends beyond the projected arrival of a CRQC. If an organization relies solely on today's public-key primitives for such data, it faces a structural vulnerability. The exposure is independent of the exact timing of the CRQC's arrival. If the time required to migrate to quantum-safe cryptography plus the required confidentiality lifetime of the data exceeds the time until a CRQC exists, the organization is already exposed. This logic implies that for data with multi-decade confidentiality requirements, current protection mechanisms are insufficient regardless of when the quantum threat materializes.

Data Categories and Retention Lifetimes

Several data categories are particularly vulnerable due to their long retention periods and strict confidentiality mandates. Personal Identifiable Information (PII), including names, Social Security numbers, financial records, and health data, carries a high risk of identity theft or privacy violations if compromised. Biometric data is also noted for having long lifespans, making it vulnerable to future decryption.

Financial data, such as bank account details, payment credentials, and transaction records, must be safeguarded for both customer protection and compliance purposes.Compromising this data could have long-term consequences. Other categories identified as having multi-decade confidentiality requirements include archives, backups, identity records, intellectual property, and signed material whose integrity must hold for years.

Planning Frameworks and Migration Readiness

To manage this risk, researchers have proposed using Mosca’s inequality as an operative planning frame. This inequality helps reason about which data categories are most exposed by comparing three variables: the time to migrate to quantum-safe cryptography (X), the required confidentiality lifetime of the data (Y), and the time until a CRQC exists (Z). If X plus Y exceeds Z, the organization is considered exposed. This framework allows custodians to map documented data-confidentiality lifetimes against post-quantum migration readiness.

Scoping reviews have been conducted to chart these lifetimes by data category and assess migration readiness by custodian sector. These reviews apply the inequality to prioritize data for post-quantum cryptography (PQC). The goal is to identify which archives and regulated datasets require immediate attention for migration to quantum-safe algorithms. By prioritizing data based on its confidentiality lifetime and the organization's migration timeline, custodians can mitigate the HNDL threat. This approach shifts the focus from reactive security measures to proactive planning based on the intersection of data retention policies and cryptographic transition timelines.

Current Status and Research Implications

The discussion of long-term archives in the context of quantum computing remains largely at the research and planning stage. While the theoretical threat is well-defined, the operational adoption of post-quantum cryptography for existing archives is not yet universal. Researchers have shown in simulation and through scoping reviews that current public-key protection is insufficient for data with multi-decade lifetimes. However, there are no claims of commercial deployment or widespread operational adoption of these migration strategies for legacy archives.

The evidence suggests that organizations should begin assessing their data portfolios for HNDL exposure. This involves identifying data with long confidentiality lifetimes and evaluating the timeline for migrating that data to quantum-safe primitives. The distinction between data that can be re-encrypted quickly and data that is static or archived is critical. For static archives, the migration challenge is more complex, requiring careful planning to ensure that the confidentiality lifetime is not breached during the transition. Until post-quantum migration is complete for all long-lived data, the risk of future decryption remains a valid concern for regulated industries.

FAQ

What is the "harvest now, decrypt later" threat?

It is a threat model where an adversary records encrypted traffic now and decrypts it once a cryptographically relevant quantum computer exists. This exposes data whose confidentiality must outlast the machine's arrival from the moment it is transmitted.

Which data categories are most at risk?

Data with multi-decade confidentiality requirements is most exposed. This includes archives, backups, regulated personal data, identity records, intellectual property, signed material, financial records, and legal documents with indefinite retention periods.

How does Mosca’s inequality apply to this use case?

Mosca’s inequality serves as a planning frame to determine exposure. If the time to migrate to quantum-safe cryptography plus the data's confidentiality lifetime exceeds the time until a CRQC exists, the organization is considered already exposed.

Is post-quantum migration currently deployed for these archives?

No. Most use cases are research-stage. While researchers have proposed frameworks and scoping reviews to assess readiness, there are no claims of commercial deployment or operational adoption of post-quantum cryptography for existing long-term archives.

Why is current public-key protection insufficient?

Current public-key primitives are insufficient for data with confidentiality lifetimes that extend past the projected arrival of a CRQC. Regardless of the exact timing of the quantum threat, relying solely on today's algorithms for multi-decade data creates a structural vulnerability.