Post-quantum cryptography

Quantum computers capable of breaking today's public-key cryptography do not exist yet. The reason to move now is that an attacker does not need one yet either.

Encrypted traffic can be recorded today and stored until the machine exists, then opened. Anything that needs to stay confidential for a decade is therefore already exposed to a computer nobody has built. New standards are published and migration has started. For most organisations the immediate work is not swapping algorithms, it is finding out where cryptography is used at all, which is usually the harder question.