Harvest Now, Decrypt Later
Harvest Now, Decrypt Later (HNDL) is the only quantum risk that is already happening. Attackers do not need a quantum computer today — they only need patience and the bandwidth to store ciphertext until one exists.
Why HNDL is the practical near-term threat
Cryptographically relevant quantum computers do not exist publicly. But TLS sessions, VPN tunnels, archival backups, and intelligence intercepts collected today can be stored cheaply for a decade or more. The day a CRQC arrives, every key-establishment record that used RSA or ECDH retroactively becomes recoverable. The risk is not that quantum breaks something — it is that today's encrypted long-life data is already exposed.
Who is most exposed
Healthcare records, government communications, financial archives, legal discovery material, identity systems, defense intelligence, and any data with a confidentiality lifetime longer than the gap to CRQC. NIST IR 8547 explicitly names long-life sensitive data as the priority migration target.
What to do in the next 12 months
Build a cryptography inventory. Identify systems still using RSA-2048 and ECDH-P256 for long-life data protection. Begin hybrid KEM rollouts on TLS endpoints. Replace static-key VPNs with PQ-hybrid alternatives. Track CNSA 2.0 deadlines internally even if you are not a national-security system — the timelines are a reasonable industry pacing signal.
What HNDL is not
It is not a reason to panic-move funds, shut down services, or buy quantum-resistant marketing. HNDL is a planning problem with a measurable timeline and a documented migration path.
Key takeaways
- HNDL means today's encrypted long-life data is already collected.
- Priority targets: healthcare, finance, government, identity, archives.
- Start a crypto inventory and pilot hybrid KEM in the next 12 months.
- CNSA 2.0 and NIST IR 8547 give you defensible internal deadlines.