Tool · Mosca’s inequality
Is your data already at risk?
Data encrypted today can be recorded now and decrypted once a large quantum computer exists. Move the sliders to see whether your migration will finish in time. Nothing leaves your browser.
Years your data must stay confidential.
Years to move your systems to quantum-safe cryptography. Large organizations often need 5–10.
Your estimate of when a quantum computer can break RSA and elliptic-curve cryptography. Nobody knows; pick a number you’d defend to your board.
How this works
Michele Mosca, a quantum computing researcher at the University of Waterloo, framed the question as a simple inequality: if the years your data must stay secret (X) plus the years your migration will take (Y) exceed the years until a quantum computer arrives (Z), some of your data will be exposed. Attackers can record encrypted traffic today and decrypt it later, so the clock started before the quantum computer exists.
The fix for most organizations starts with hybrid key exchange (classical plus ML-KEM, NIST FIPS 203) on the connections that carry long-lived data, and an inventory of every place public-key cryptography is used. Read more in Harvest now, decrypt later: is your data already exposed?
Have a system that has to hold?
Tell us what you're protecting and when it has to be ready. You'll get a straight answer on scope, timeline and price, usually within one business day.