Changing the locks before the quantum thief arrives

Almost every private thing you do online — logging in, paying, messaging — is protected by a kind of math that is easy to do one way and brutally hard to undo. Multiplying two huge prime numbers is easy; taking the product back apart into those primes is, for classical computers, effectively impossible at the sizes we use. That asymmetry is the lock on the internet’s front door.

A sufficiently large quantum computer running Shor’s algorithm would pick that lock. Its interference trick happens to fit the structure of the factoring problem exactly, collapsing the hard direction from “longer than the age of the universe” to “tractable.” The machine that can do it does not exist yet, and may be years or more away. So why is anyone rushing?

Because encrypted data can be stolen today and stored, patiently, until the machine that opens it exists. An adversary does not need a quantum computer now to benefit from one later — they just need to be recording your traffic now. Anything that has to stay secret for a decade or two is, in effect, already exposed to a computer that hasn’t been built.

That is the whole reason the timeline feels backwards. You cannot wait for the threat to be real to respond, because the theft happens before the threat arrives. You change the locks while the thief is still shopping for tools.

The replacements are called post-quantum cryptography, and the surprise is that they run on ordinary computers. They are not quantum themselves — they are built on different math problems, ones for which no efficient quantum attack is known. The leading family is based on lattices: puzzles about finding the nearest point in a high-dimensional grid, hard in a way Shor’s trick does not touch.

This is not speculative anymore. National standards bodies have picked and published the first post-quantum algorithms, and browsers, messaging apps and VPNs have begun switching over. The migration is slow because the old locks are everywhere, but it has started.

The odd shape of this story — defending against a machine that does not exist — makes sense once you add the time dimension. Secrets have shelf lives, and “harvest now, decrypt later” means the clock is already running. Post-quantum cryptography is not paranoia about the future; it is ordinary caution about data that has to survive it.