Harvest Now, Decrypt Later (with Marcus Sachs) - #290

Nation-state adversaries are vacuuming up encrypted traffic today, waiting for quantum computers to decrypt it tomorrow. This attack strategy, "Harvest Now, Decrypt Later," isn't theoretical. It's happening right now.

G Mark Hardy sits down with Marcus Sachs (former White House cyber advisor, CSO of NERC, now SVP and Chief Engineer at CIS) to break down two executive orders just signed by the White House on post-quantum cryptography and what every security leader needs to do before the clock runs out.

What you'll learn:

• Why TLS, VPNs, and PKI are your most urgent exposure
• The Harvest Now, Decrypt Later threat model and what it means for your data retention policies
• How to build a Cryptographic Bill of Materials (CBOM)
• What cryptographic agility means and why hard-coded crypto is a ticking time bomb
• Lessons from Y2K that apply directly to the quantum migration

You can't name a date certain. But your adversaries are already running the clock.

Links, NIST resources, and both executive orders in the show notes.

https://www.nist.gov/cybersecurity-and-privacy/what-post-quantum-cryptography

https://www.nist.gov/pqc