Gartner says organizations are already behind on quantum preparation

Organizations may have less time than they think to prepare for the effect quantum computing could have on encryption. Gartner predicts that advances in quantum computing will make conventional asymmetric cryptography unsafe to use by 2030. Replacing cryptography across applications, infrastructure, identity systems and suppliers can take years.

TechRadar’s Sarah Almond reports that 61% of organizations lack full visibility into their cryptographic systems, citing Gartner research. Without knowing where cryptography is used, organizations cannot plan a migration away from vulnerable methods.

The risk may also concern data stolen today. Adversaries can collect encrypted information and retain it until future technology can decrypt it, a strategy known as “harvest now, decrypt later.” This could matter for information that needs protection over a long period, including government records, medical files, intellectual property, contracts and identity documents.

The article says post-quantum algorithms may not work as simple replacements: larger keys can strain older systems, and changes in signing speeds could affect legacy applications. It argues that organizations should build “crypto-agility”—the ability to change algorithms, keys and protocols—and use hybrid cryptography as a transition measure.

Suggested first steps include inventorying cryptographic components, prioritizing data that must remain protected after 2030, and coordinating developers, cloud and network teams, identity teams and procurement. The article also notes that standards are still being developed, so organizations should assess vendor plans and dependencies.