The quantum threat in plain words
Most secure connections, including VPNs, HTTPS and device management, rely on public-key algorithms that a large enough quantum computer could break. Attackers can already record encrypted traffic today and try to decrypt it later, which is called 'harvest now, decrypt later'.
New standards are here
Standards bodies have published the first post-quantum algorithms for key exchange and digital signatures, and vendors are beginning to add them to VPNs, browsers and operating systems. The transition will take years, much like the move from older encryption protocols did.
Start with an inventory
List where encryption is used across the network: VPN gateways, firewalls, management interfaces, wireless authentication, certificates and firmware signing. You cannot migrate what you cannot see.
Build crypto-agility
Prefer equipment and software that can be updated to new algorithms through firmware, keep certificate lifetimes manageable, and track vendor roadmaps for post-quantum support.
Prioritise long-lived secrets
Data that must stay confidential for many years, such as health records, financial data and government information, should be the first to move to post-quantum protection.
