Preparing for Q-Day

The threat of quantum computers breaking modern cryptography is no longer a distant theoretical concern—it's accelerating rapidly, with experts now projecting a 'Q-Day' as early as 2029. In this episode, Boss Vesterbond, a cryptography engineer at Cloudflare, explains how quantum computers could render today’s public-key encryption obsolete, enabling attackers to decrypt years of recorded encrypted traffic (the 'harvest now, decrypt later' threat) and forge trusted digital certificates. While symmetric cryptography like AES remains secure, the real danger lies in algorithms like RSA and elliptic curve cryptography, which quantum computers could crack using Shor’s algorithm. The solution lies in post-quantum cryptography—particularly lattice-based schemes like MLDSA—which are already being deployed in modern browsers. However, full migration requires upgrading not just software, but also hardware, certificates, and protocols across a vast ecosystem. The biggest challenges aren’t technical—they’re organizational: legacy systems, embedded devices with limited memory, and vendors who won’t update. Vesterbond warns that the real risk isn’t just the technology—it’s the 90% of systems that won’t be ready in time. The good news? Most software upgrades are straightforward if you start now. The bad news? The window to act is shrinking fast. The episode reveals a critical insight: quantum readiness isn’t about waiting for a breakthrough—it’s about proactive risk management.