Curriculum / Quantum Cryptography / Post-Quantum Migration Planning
Post-Quantum Migration Planning
Develop a practical migration strategy from classical to quantum-resistant cryptography.
Post-Quantum Migration Planning
The transition from classical to post-quantum cryptography is one of the most significant cryptographic migrations in history. Unlike Y2K or SSL/TLS upgrades, this migration must happen before quantum computers arrive: because attackers are already harvesting encrypted data to decrypt later.
The Migration Urgency: Harvest Now, Decrypt Later
The "harvest now, decrypt later" (HNDL) threat is real and ongoing:
- •Nation-state adversaries record encrypted TLS traffic today
- •Store it until a cryptographically relevant quantum computer exists
- •Decrypt it retroactively
Any data that must remain confidential for more than 10-15 years faces HNDL exposure right now. Government secrets, medical records, intellectual property, and long-term financial data all qualify. The NIST PQC standards finalized in 2024 are the response: migration should begin immediately for sensitive systems.
Crypto-Agility: Building for Change
The most important architectural principle for post-quantum migration is crypto-agility: designing systems so that cryptographic algorithms can be swapped without rewriting application logic.
Key practices:
- •Algorithm identifiers in protocols: TLS, SSH, and S/MIME all negotiate algorithms during handshake. Add PQC algorithm IDs to these negotiations.
- •Key and certificate management: PKI (Public Key Infrastructure) must be able to issue X.509 certificates with PQC keys. NIST has defined OIDs for ML-KEM, ML-DSA, FALCON, and SPHINCS+.
- •Hardware Security Modules (HSMs): HSMs that hard-code RSA operations must be updated or replaced. Many existing HSMs cannot run ML-KEM.
- •Protocol version gating: Support parallel classical+PQC operation during the transition to maintain backward compatibility.
Migration Phases
Phase 1: Inventory (now)
Catalog all cryptographic assets: certificates, key material, protocols, library versions, hardware. Focus on:
- •What algorithms are in use?
- •What is the expected data lifetime?
- •Which systems are HNDL-exposed?
Tools: NIST NCCoE cryptographic inventory guidance, OpenSSL grep for algorithm strings, certificate scanners.
Phase 2: Prioritization (2024-2026)
Rank systems by risk:
- 1.Long-lived secrets (government, medical): highest priority
- 2.PKI root certificates: migrate early since trust anchor changes propagate slowly
- 3.TLS/HTTPS servers: deploy hybrid mode (X25519+ML-KEM)
- 4.Internal services: lower priority but still on the roadmap
This is the opening of the lesson. The full walkthrough, the interactive circuit, and the graded challenge continue inside myqubit.
How this lesson works
A guided reading lesson with interactive knowledge checks. Concepts are explained step by step with circuit diagrams and runnable examples, and you confirm understanding before moving on.
Part of: Quantum Cryptography
Master quantum key distribution, the threat quantum computers pose to classical cryptography, and post-quantum cryptographic standards.
This lesson is part of Pro
Unlock Quantum Cryptography and all 10 tracks with Pro: $12.99/month, $79/year, or $97 lifetime. Start with the free track first if you are new.