{"id":17945,"date":"2024-08-06T09:45:42","date_gmt":"2024-08-06T13:45:42","guid":{"rendered":"https:\/\/www.thesslstore.com\/blog\/?p=17945"},"modified":"2025-03-21T09:34:57","modified_gmt":"2025-03-21T13:34:57","slug":"harvest-now-decrypt-later-hndl","status":"publish","type":"post","link":"https:\/\/www.thesslstore.com\/blog\/harvest-now-decrypt-later-hndl\/","title":{"rendered":"Harvest Now, Decrypt Later (HNDL): A Look at This Current & Future Threat"},"content":{"rendered":"\n

HNDL retrospective decryption attacks are a major concern for more than half of the professionals surveyed by Deloitte<\/a>. We\u2019ll explore what these quantum-related future threats are and how you can future-proof your enterprise against them<\/h2>\n\n\n\n

Bad guys, right now, might be loading up your most sensitive data like it\u2019s clearance day at their favorite warehouse store.<\/p>\n\n\n\n

Your data is encrypted? They don\u2019t care. Threat actors are putting your data \u201con ice,\u201d storing it until quantum computing capabilities come along that can break modern encryption schemes. (And Q-Day might be here sooner than you think!<\/a>)<\/p>\n\n\n\n

This activity is known as a \u201charvest now, decrypt later\u201d attack. We\u2019ll explore what HNDL attacks are and how you can harden your cyber defenses and data against these threats now and in the future.<\/p>\n\n\n\n

Let\u2019s hash it out.<\/span><\/p>\n\n\n<\/span><\/span>\n\n\n

What Is a Harvest Now, Decrypt Later (HDNL) Attack?<\/h2>\n\n\n\n

Harvest now, decrypt later is a surreptitious two-part cyber attack in which threat actors collect sensitive information now for use at a later date. It\u2019s about collecting a wealth of encrypted data now that can be capitalized upon \u201ctomorrow\u201d (i.e., whenever these silicone-based systems become available outside a laboratory setting). For this reason, this method is also called \u201cstore now, decrypt later\u201d and \u201ccatch now, break later\u201d attacks.<\/p>\n\n\n\n

Bad guys are biding their time until quantum computers are readily available, simply collecting and storing the information in the meantime. After all, why should they invest all of the time, effort, and resources required to break cryptographic algorithms that future quantum computers will be able to break within a matter of minutes, hours, or days?<\/p>\n\n\n\n

Why Quantum Computing Is the Key to HNDL Attacks<\/h2>\n\n\n\n

Quantum computers harness the power of the quantum mechanics superposition principle<\/a> (i.e., the ability for elements to exist in multiple states simultaneously). This computational power is central to concerns about harvest now, decrypt later attacks. This is why quantum-safe (or, more accurately, quantum-resistant<\/em>) cryptosystems must withstand the processing power of quantum computers. As such, data must be cryptographically secured using quantum-resistant algorithms<\/a> (i.e., post-quantum cryptography<\/a>).  <\/p>\n\n\n\n

Cryptographically relevant quantum computers are expected to break the factorization problem that\u2019s at the heart of modern public key encryption schemes. Basically, any data secured by modern public key encryption schemes alone would be at risk of compromise once the quantum tools are available. It doesn\u2019t matter whether you\u2019re a small business or one of the world\u2019s biggest enterprises; we\u2019ll all require the same post-quantum encryption<\/a> and key exchange algorithms that are specifically designed to combat quantum computer-based attacks.<\/p>\n\n\n\n

Shor\u2019s Algorithm<\/a> is poised to break the public key cryptography schemes we rely on today that are based on the discrete logarithm (ECDH) and prime factorization (RSA) integers. Wondering how it all works? Rather than me trying to explain it, you can hear it straight from the horse\u2019s mouth and get the low-down from mathematician Peter Shor himself:<\/p>\n\n\n\n

\n