Pieza independiente
Harvest now, decrypt later
Movement 6 · The Territory — September 2026
I The defeat that already happened
There is no machine today that can break the encryption protecting your bank. That is not the problem.
The problem is this: storing encrypted traffic costs pennies per terabyte and waiting costs nothing. Whoever saves today what they cannot read will be able to read it the day the machine exists, and the arithmetic is cheap on their side: a disk and patience.
If that loss is going to happen, it already happened, and it happened without anyone noticing.
“The attacker does not need to break your encryption today. Patience and a disk will do.”
II What was settled while nobody was looking
| Date | What | Effect |
|---|---|---|
| Aug 2024 | three post-quantum standards finalised | the argument about which algorithm ends |
| Mar 2025 | a fourth mechanism as an alternative | cover in case one family fails |
| 2025–26 | migration moves into protocols and products | the real work begins |
The hard part was never picking the algorithm. It is knowing how many keys you have, where they are, and which ones you can change without asking anyone's permission [the inventory, which is humiliating and cannot be presented anywhere].
III The sum that tells you if you are late
- T_s
- years your data must stay secret
- T_m
- years it will take you to migrate
- T_q
- years until a machine can break it
If the inequality holds, you are already late. A medical record asks for fifty years of secrecy; a supply contract, twenty; a message sent tonight, half an hour. Almost nobody sorts their data by that criterion, which is why almost everybody protects the thing that matters least. What is really at stake is the old file [the one nobody looks at any more and that is still copied in three places].
IV Key inventory [safe]
- Open a notebook and write down every device or service holding a key of yours. Router, car, door lock, server, backup.
- Mark the ones that no longer get updates from the manufacturer.
- Mark the ones that depend on a company that could disappear.
- Count how many keys you can change on your own, today, without calling anyone.
- That number divided by the total is your actual sovereignty. The rest is trust in third parties.
V Risks
The expensive mistake is not using an old algorithm. It is being unable to change it. A system with the primitive welded into the product forces you to replace the whole product; that turns an afternoon's technical decision into a six-figure purchase [and into a meeting with finance].
There is also a calendar temptation, and it works like this: the machine does not exist, so the matter gets postponed; because it gets postponed the inventory never gets done; and the day the machine exists the inventory will still not be done.
VI Coda
This is the dullest branch of all and probably the only one that is going to happen exactly as announced.
Security you can notice is advertising. The kind that works looks like rotating keys every five years and auditing without stopping, for ever, with nobody ever writing a manifesto about it.