When will the quantum computer that breaks RSA arrive?

Nobody knows, and anyone naming a year is guessing. It also does not matter for your decision: what counts is how long your data must stay confidential and how long your migration takes. If the sum exceeds the plausible horizon, act now — regardless of the exact date.

Are the new algorithms really secure?

By current understanding they are, and they went through a multi-year public selection process. That is not a guarantee — it never was for RSA either. Which is exactly why migration is hybrid: as long as both algorithms run side by side, the other one holds if one falls.

What if our vendors are not ready yet?

That is the normal case and the most common reason migrations stall. We put the dependency in the plan rather than skirting it: which version is needed, when it is announced, what the interim solution is. In some cases the answer is to change supplier.

Do we need new hardware for this?

For quantum-safe algorithms, as a rule no — they run on existing systems. Only QKD needs dedicated devices and dedicated links, and that applies to very few organisations. Where accelerator cards are involved, we check their support as part of the work.

Can we start with one area?

Yes, and that is the usual route. Most begin with the external connections carrying long-lived data. The inventory should be complete, though — otherwise you are planning around the places you do not know about.

Defensive Services

Quantum Cryptography as a Service

The data you encrypt today is not at risk only once capable quantum computers exist. It is at risk now — if somebody records the traffic and stores it until they can decrypt it. For anything that must still be confidential in ten years, the deadline has already passed.