The best quantum defence is an unglamorous cryptography overhaul

Quantum cybersecurity is often presented as a contest of matching marvels: quantum computers threaten encryption, while quantum communications, sensors and other emerging tools ride to its rescue. It is an appealing symmetry, and a recent Forbes column used that broad threat-and-opportunity frame. But it is a poor guide to organisational decisions.

The two sides are not equally mature. The established concern is that a sufficiently capable quantum computer could undermine widely used public-key cryptography. The most broadly applicable response, post-quantum cryptography, runs on classical systems and now includes approved standards. By contrast, quantum key distribution and sensing remain specialised technologies with narrower applications and significant caveats.

The practical opportunity is therefore less futuristic than the marketing suggests. It is the chance to discover where cryptography lives, identify which data must remain confidential, confront obsolete systems, demand credible supplier plans and build the ability to change algorithms again. Organisations should fund that work before counting quantum-branded pilots as evidence of readiness.

Urgency without the countdown

Precision matters because the phrase quantum threat can imply more than the evidence supports. NIST and the Australian Signals Directorate say no cryptographically relevant quantum computer currently exists, and its arrival date remains uncertain. NIST describes estimates ranging from a few years to a few decades.

If such a machine became available, Shor’s algorithm could undermine RSA and public-key schemes based on the discrete logarithm problem, including DH, ECDH and ECDSA. Suitable symmetric cryptography is not affected to the same degree. This is a serious prospective threat to encryption, authentication and digital signatures, not the instantaneous collapse of all cryptography.

That uncertainty does not justify waiting. CISA, NSA and NIST advise organisations to create roadmaps, inventory quantum-vulnerable cryptography, prioritise long-lived sensitive data and engage suppliers. Their guidance also identifies the risk that ciphertext collected today could be retained for decryption later. The reviewed public material does not establish how common such collection is, but the possibility matters when information must remain secret for years.

This is why Q-Day rhetoric is a weak governance tool. A dramatic countdown asks leaders to bet on an unknowable date. A better calculation starts with how long data needs protection, how long systems remain in service and how difficult their cryptographic dependencies will be to replace. Even if capable quantum computing develops slowly, a sprawling migration cannot sensibly begin at the moment the threat becomes immediate.

Standards exist, but the transition is still moving

The response is no longer purely theoretical. In August 2024, NIST approved three post-quantum standards: FIPS 203 for key establishment, and FIPS 204 and FIPS 205 for digital signatures. Yet the standards landscape is not frozen. As of its 5 August 2026 project update, NIST still listed FIPS 206 as being developed, while HQC had been selected for future standardisation as an additional key-encapsulation mechanism.

That combination supports planning and staged implementation, not an uncontrolled rush. Organisations can begin discovery, prioritisation, supplier engagement and architecture work while assessing standardised and verified implementations for deployment. They do not need every future specification to be finished before learning what they must eventually replace.

Timetables also differ. NIST’s transition direction and the UK National Cyber Security Centre roadmap point broadly towards 2035 as the endpoint for removing or completing migration from quantum-vulnerable public-key cryptography. ASD recommends a faster Australian schedule: a refined transition plan by the end of 2026, transition beginning by the end of 2028 and completion by the end of 2030.

Those Australian dates are recommendations, not a universal statutory deadline. Multinational organisations may also have to reconcile several national schedules. Even so, an Australian organisation should not casually import 2035 as permission to defer its first serious decisions. Under ASD’s timetable, the immediate deliverable is a credible plan, not a speculative experiment.

The migration dividend

A cryptographic inventory can sound like administrative housekeeping. In practice, it is the foundation of the transition because an organisation cannot replace dependencies it cannot locate. Cryptography may sit inside systems, products and supplier services whose ownership and replacement cycles are divided across teams.

The broader value follows from forcing those dependencies into view. A serious programme should identify vulnerable cryptography, connect it to the data and trust functions it protects, assign accountable owners and establish replacement milestones. Supplier roadmaps then become procurement evidence to test, rather than assurances to accept at face value.

Crypto-agility is the other part of this dividend. Organisations should design systems and contracts so cryptographic components can be changed as standards and risks evolve. This work does not itself make anything quantum-resistant. Standards-compliant implementation and the eventual removal of vulnerable dependencies remain essential. But it can reduce the chance that the next transition becomes another hunt through undocumented systems.

If capable quantum computing arrives sooner than expected, organisations that have prioritised long-lived confidential data and important trust mechanisms will be better placed to respond. If it remains decades away, the discovery and renewal work can still expose obsolete technology, unclear ownership and supplier dependence, provided the programme is integrated with normal system lifecycles. A badly managed migration could instead add cost and defects, so the dividend is possible rather than automatic.

Specialist tools are not an enterprise strategy

Quantum key distribution deserves evaluation on its actual merits, not as a magical replacement for conventional security architecture. NSA does not recommend QKD for US National Security Systems unless its stated limitations are overcome, and regards post-quantum cryptography as easier to maintain and more cost-effective. NIST notes technological and theoretical loopholes in current QKD systems.

The UK NCSC likewise says QKD should not be relied upon by itself. It requires quantum-resistant authentication alongside it, can add complexity and security risk, and is not the best general mitigation. That does not make every experiment pointless. High-value government, defence or infrastructure links might justify carefully bounded trials. If technical and economic constraints improve, QKD could become a supplementary control for a narrow class of communications. It should not displace the general migration to post-quantum cryptography.

Quantum sensing requires a different distinction. ASD describes it primarily as more precise measurement of physical phenomena, with potential uses including navigation and resource exploration. It also warns that sensors can bring spoofing, tampering, software and supply-chain risks. That makes sensing relevant to physical and operational environments, but it is not evidence that quantum sensors generally improve digital threat detection. Claims about generic security operations benefits should wait for authoritative operational support.

Measure readiness, not novelty

There is a legitimate counterargument to moving aggressively: premature adoption can create interoperability problems, proprietary lock-in, additional complexity and insecure implementations. ASD itself warns against rushing ahead of standardised and verified implementations. Caution is particularly important while further standards remain under development.

But caution about deployment should not become an excuse to postpone discovery. Inventory work, data prioritisation, supplier engagement and funded planning can proceed without committing an entire organisation to immature products. The correct balance is to move early on knowledge and governance, then move carefully on implementation.

Boards should therefore ask for measures that reveal whether the institution can complete the transition. How much of its vulnerable cryptography has been inventoried? Which data classes and trust functions have priority? Are milestones funded and assigned? Do suppliers have testable commitments? Can replacements be introduced and verified without rebuilding everything around them?

The number of quantum pilots answers none of those questions. Quantum cybersecurity may eventually include valuable communications, sensing and other specialist technologies. Today, however, the defensible enterprise opportunity is more prosaic: use the coming cryptographic transition to remove uncertainty from systems, contracts and accountability. The organisations best prepared for a quantum future will not necessarily be those that bought the most quantum technology. They will be those that learned how to change.

Cryptographic inventories make more sense when the algorithms and trust functions beneath them are understood. Explore The Hack Academy’s online cybersecurity training programme to study cryptography and cybersecurity fundamentals at your own pace, with practical exercises alongside theory.