The security of the global internet infrastructure is entering a phase of silent emergency. The rise of quantum computers, capable of solving in seconds calculations that would take current machines millennia, renders obsolete the public-key cryptography protecting today's financial transactions and government communications.

The "Harvest Now, Decrypt Later" Trap

The most immediate risk is not a future attack, but the current one. According to NIST expert Andrew Regenscheid, organizations must address the "harvest now, decrypt later" strategy. Adversaries are already intercepting and archiving vast amounts of encrypted internet traffic, intending to decrypt it once a cryptographically relevant quantum computer (CRQC) becomes available. This makes the migration to post-quantum cryptography (PQC) an urgent priority for any data requiring long-term secrecy.

Federal Deadlines and the US Offensive

The US government has shifted PQC from theoretical research to a compliance mandate. Under Executive Order 14412, strict deadlines have been established: critical federal systems must complete their PQC migration by the end of 2027, with a final deadline for all agencies set for December 31, 2031. This regulatory push is already trickling down to the private sector; Google Cloud has already introduced quantum-safe digital signatures (such as ML-DSA and SLH-DSA) within its Key Management Service.

AI Accelerating the Collapse of Standards

The cryptographic arms race is further complicated by generative AI. Recently, Anthropic's Claude Mythos Preview model demonstrated its ability to uncover vulnerabilities in algorithms previously considered secure. The attack targeted HAWK, a digital signature scheme that had survived two rounds of NIST testing, leading the developer to withdraw it. The AI also devised a faster attack on reduced-round versions of AES, the world's most widely used encryption algorithm.

Toward a Dynamic Trust Infrastructure

The transition to PQC is not merely a software update but a paradigm shift. Digital trust can no longer be static; it requires agility to replace algorithms as new vulnerabilities emerge, whether via quantum leaps or AI-driven analysis. The challenge now shifts to functional efficiency: implementing these new signatures without compromising bandwidth or processing power.