Post-Quantum Cryptography Readiness: Risk Assessment & Migration Roadmap

Sensitive research data stolen today can be decrypted once powerful quantum computers arrive, a threat known as “harvest now, decrypt later.” For R&D organizations, that puts formulations, genomic and clinical data, process know-how, and trade secrets with 10 to 20 years of value at risk right now. NIST finalized its first post-quantum cryptography standards in 2024 (FIPS 203, 204, and 205) and plans to deprecate RSA and elliptic-curve cryptography by 2030 and disallow them by 2035, and customers and regulators are increasingly asking suppliers about quantum readiness. Because enterprise migrations take years, the time to plan is now. This service starts with a cryptographic inventory that identifies where you rely on vulnerable algorithms across applications, cloud services, data stores, lab instruments, manufacturing and OT/IoT systems, vendor integrations, and code-signing pipelines. Drawing on my research on post-quantum cryptography in hardware and side-channel security, I also evaluate embedded devices, FPGAs, and equipment where cryptography runs in hardware and upgrades are hardest. Each finding is prioritized by how long the underlying data must stay confidential and how hard the system is to upgrade, so effort goes where risk is highest. The result is a phased migration roadmap covering hybrid classical/post-quantum deployment, crypto-agility, vendor requirements, and timelines aligned to NIST guidance and CNSA 2.0, plus a plain-language briefing for leadership, IP, and legal teams. Optional add-ons include a pilot implementation on a priority system, team training, and readiness reviews of key suppliers. Engagements are remote-first, with on-site workshops available in the Chicago area. Each one begins with a free 30-minute discovery call and a scoping session with your IT, security, and R&D leads. Findings are delivered as a written report and a live readout, and NDAs are welcome. A rapid assessment typically takes [2–3] weeks and a full roadmap [6–10] weeks depending on scope, with advisory retainers also available. I take on [1–2] engagements at a time and can usually start within [2] weeks. This is a strong fit for R&D-intensive companies in pharma, biotech, agriculture, food, chemicals, materials, and consumer products, especially those holding long-lived IP, sharing data with external collaborators, running connected lab or manufacturing equipment, or facing customer or regulatory questions about quantum readiness. I am an Associate Professor of Electrical and Computer Engineering at Northwestern University, where I lead the Computer Architecture and Security Lab (CASLAB). My research spans hardware accelerators for post-quantum cryptographic algorithms, processor and hardware security, and the security of quantum computers, including industry collaborations on hardware implementations of post-quantum algorithms. I hold a PhD from Princeton, received an NSF CAREER award, and am the author of “Principles of Secure Processor Architecture Design.”