Harvest Now, Decrypt Later: The Quantum Threat Reshaping America's Intelligence Calculus
A Threat That Begins Before the Technology Arrives
The conventional framing of quantum computing as a future problem is, by most serious assessments within the intelligence community, dangerously misleading. The threat is not contingent on a rival state achieving quantum supremacy tomorrow. It is already operational in a subtler, more patient form.
For several years, foreign intelligence services — most notably those affiliated with China and Russia — have been conducting what analysts term "harvest now, decrypt later" collection campaigns. The strategy is straightforward in concept and deeply alarming in implication: intercept and archive encrypted communications at scale today, then apply quantum decryption capabilities retroactively once the technology matures. The encryption protecting those transmissions may be unbreakable in 2025. It may not remain so in 2030, or 2032, or whenever the cryptographic threshold is crossed.
This means that diplomatic cables, signals intelligence, classified interagency correspondence, and sensitive commercial communications being transmitted right now are, in effect, on a countdown clock. The adversary does not need to break the encryption today. They only need to store the data until they can.
The Timeline Problem
Estimating when a sufficiently powerful quantum computer — one capable of breaking RSA-2048 or elliptic-curve cryptography at scale — will exist is itself a contested intelligence question. Projections range from as few as five years to as many as fifteen, with significant variance depending on which research trajectory one credits and how much weight is assigned to classified state programs operating outside public view.
What is not contested is that China has made quantum computing a national strategic priority. Beijing's investment in quantum research is substantial, institutionally coordinated, and shielded from the kind of open-source scrutiny that allows Western analysts to benchmark progress. The National Security Agency has publicly acknowledged that cryptographically relevant quantum computers pose a genuine long-term threat. In intelligence terms, "long-term" and "already underway" are not mutually exclusive categories.
The asymmetry here is significant. The United States must complete a full-scale cryptographic transition across its entire government and defense-industrial infrastructure before a rival achieves the capability to break current standards. The adversary, by contrast, only needs to succeed once — and only needs to have been collecting data patiently in the interim.
What the Intelligence Community Is Doing — and What It Isn't
The National Institute of Standards and Technology finalized its first set of post-quantum cryptographic standards in 2024, a milestone that represented years of competitive evaluation and represented genuine institutional progress. The NSA has issued guidance directing national security systems to begin migration toward quantum-resistant algorithms. The Office of Management and Budget has set deadlines for federal agencies to inventory cryptographic dependencies.
On paper, the architecture of a response exists. In practice, the execution is fragmented, underfunded in critical areas, and complicated by a problem that security professionals refer to as "cryptographic debt" — the accumulated legacy of decades of systems built on encryption standards that were never designed with a post-quantum adversary in mind.
Many of the systems most critical to national security — command-and-control infrastructure, intelligence-sharing platforms, defense contractor networks — were built on cryptographic foundations that will require significant re-engineering, not simple software patches. The scope of that re-engineering effort is not uniformly understood across the agencies and private-sector entities that comprise the broader national security enterprise.
Equally concerning is the classified dimension of this transition. Open-source assessments of adversarial quantum progress are, by definition, incomplete. If foreign programs are further along than publicly available indicators suggest, the window for a managed transition narrows considerably — and may already be narrower than official timelines acknowledge.
The Defense-Industrial Exposure
Beyond the government's own systems, the defense-industrial base represents a particularly acute vulnerability. Prime contractors, subcontractors, and the extended supply chains that support weapons development, advanced research, and classified manufacturing are deeply integrated into the national security apparatus — and deeply variable in their cryptographic sophistication.
A tier-one defense contractor with significant cybersecurity resources and a cleared workforce may be well-positioned to begin post-quantum migration. A smaller subcontractor holding sensitive technical data on a legacy network may not even have a clear inventory of its cryptographic dependencies, let alone a remediation timeline. Adversaries conducting harvest-now operations are not limiting their collection to the most hardened targets. They are sweeping broadly, and the weakest links in the defense-industrial chain are precisely the links most likely to be holding data worth storing.
The counterintelligence implications extend further still. Personnel records, security clearance documentation, technical specifications for systems still in development — all of this represents intelligence value that does not diminish with time. Decrypting a tranche of archived data from a defense contractor's network in 2031 could yield insights into systems that will still be operational well into the 2040s.
Mapping the Strategic Blind Spot
What makes this threat particularly difficult to address at a policy level is its invisibility in the present tense. There is no incident to respond to, no breach to disclose, no system to patch in the immediate term. The damage being done now will only manifest when a technological threshold is crossed — at which point the opportunity to prevent the original collection will have long passed.
This temporal dislocation creates predictable institutional challenges. Agencies and oversight bodies are oriented toward present-tense threats. Budget cycles are annual. The political salience of a threat that has not yet produced visible harm is inherently lower than one that has. And the classified nature of the most sensitive assessments limits the kind of public and congressional pressure that might otherwise accelerate action.
For policy makers and security professionals, the relevant question is not whether quantum decryption will eventually be possible. The technical consensus is that it will. The relevant questions are whether the United States will complete its cryptographic transition before adversaries reach that threshold, whether legacy data already collected can be protected through other means, and whether the intelligence community has an accurate picture of how close foreign programs actually are.
The answers to those questions are not fully knowable from open sources. That uncertainty is itself a strategic condition that adversaries may be deliberately cultivating.
The Window Is Not Closed — But It Is Narrowing
Post-quantum cryptography is not an unsolvable problem. The mathematical foundations for quantum-resistant encryption exist, the standards are being established, and the institutional will to address the transition — at least at the senior levels of the national security apparatus — is real. The United States retains significant advantages in the underlying science and in the depth of its cryptographic research community.
But advantages in research do not automatically translate into advantages in implementation, particularly at the scale and speed that the threat timeline may require. The gap between where the federal government's cryptographic infrastructure stands today and where it needs to be is measurable in years of engineering work, billions of dollars of investment, and an organizational complexity that has no clean parallel in prior technology transitions.
For security professionals mapping institutional risk, the quantum threat should be understood not as a future scenario to monitor but as an active operational condition. The harvest is already underway. The decrypt is a matter of when, not if. The decisions made — or deferred — in the near term will determine whether America's most sensitive secrets remain secrets when that moment arrives.