Why The Post-Quantum Shift Could Leave Older IT Systems Behind: Experts

Security experts tell CRN that budget constraints, aging infrastructure and unupgradable hardware could leave critical technology vulnerable for years, creating both major risks for customers and new opportunities for solution providers.

While it’s entirely possible that many businesses will succeed at protecting their most essential IT systems before the arrival of quantum-powered attacks that can overpower classic encryption, the picture that’s emerging is that not all IT systems may be able to make the transition, post-quantum security experts told CRN.

Due to factors such as cost and the amount of effort involved, older technology that still works and serves a business purpose may be left vulnerable to attack—possibly for years, experts said.

“There’s just a lot of detritus from the past that is just going to bite us,” said Jason Soroko, a veteran cryptography specialist and senior fellow at digital certificate management provider Sectigo, Scottsdale, Ariz. “I actually think that we’re going to live well past 2029, 2030, 2035, where we’re going to have legacy systems that are fully operational—and utterly insecure.”