Speaking at the Senior Executive Roundtable titled “Post-Quantum Security: Data Governance Challenges & Implementation Roadmap for Enterprises and Organizations in Vietnam”, co-hosted on October 3 by Vietnam Economic Times (VnEconomy) in collaboration with Canadian tech firm Quantropi and VNet, Mr. James Nguyen, CEO and Co-founder of Quantropi, stated that the simultaneous rise of artificial intelligence (AI) and quantum computing is shifting fundamental assumptions about cryptographic security.
"Widely used encryption methods today are at risk of no longer providing adequate data protection against unprecedented processing power", he said.
Post-quantum security risks in the age of AI
According to Mr. James Nguyen, warnings regarding quantum computers breaking conventional encryption algorithms like RSA are becoming increasingly distinct. Today, several technology firms and research institutions have issued timelines earlier than previously anticipated regarding the "potential emergence of quantum computers capable of compromising existing cryptographic systems."
“The convergence of AI and quantum computing poses a massive cybersecurity challenge. AI enables attackers to drastically accelerate the discovery and exploitation of system vulnerabilities, while future large-scale quantum computers will be capable of breaking currently deployed public-key algorithms,” Mr. Nguyen added.
IonQ, a quantum computing hardware and software company, projected a scenario where a quantum computer capable of breaking RSA, the public-key algorithm widely used to secure data and digital signatures could emerge as early as 2028. Meanwhile, Microsoft, Google, and research firm Gartner have issued alerts emphasizing the urgent need to transition and strengthen cryptographic resilience before 2029.
One of the most critical threats highlighted by Mr. Nguyen is the “Harvest Now, Decrypt Later” strategy. Under this tactic, threat actors silently intercept and store encrypted data today, waiting for quantum computers to grow powerful enough to crack public-key algorithms, or for AI to assist in efficiently exploiting structural, implementation, and key-management flaws.
This implies that sensitive information protected by today’s standard algorithms remains exposed to future compromise, even if attackers cannot read the data at the moment of interception.
To address this, Mr. Nguyen urged organizations to clearly map out their data security lifecycles, the duration for which specific information must remain confidential to select appropriate countermeasures. For data requiring protection for a decade or longer, postponing defense measures until quantum computers become fully operational will be far too late.
“Just one or two years ago, the consensus was that quantum threats wouldn't require action until after 2030. Today, time is running out much faster than we anticipated,” said Mr. Nguyen.
PQC upgrade is necessary, but new threats require preparation
Post-Quantum Cryptography (PQC) represents a vital transition, replacing vulnerable encryption algorithms with mathematical problems designed to resist quantum attacks.
However, according to Mr. Nguyen, migrating to PQC alone does not mean an organization has eliminated all security exposure.
"PQC is a necessary upgrade, but organizations must still prepare for new risk vectors. Without proactive preparation and early deployment of security measures, our window of response will rapidly close."
According to the Quantropi representative, complex cryptographic problems that previously took top researchers years to evaluate can now be analyzed by AI in a fraction of the time.
Illustrating this acceleration, Mr. Nguyen noted that AI is significantly speeding up discoveries in mathematics. OpenAI’s publication of 722 research papers in a single month serves as a clear indication of an irreversible trend.
For critical infrastructure operators, this accelerated pace of innovation means the lifespan of traditional security standards is shrinking rapidly.
"In an era where the next technological breakthrough cannot be predicted, proactive risk management is imperative. The key lies in a defense-in-depth strategy: aggressively deploying Post-Quantum Cryptography while ensuring security architectures do not rely on a single mathematical assumption," Mr. Nguyen shared.
Defending networks against "Harvest Now, Decrypt Later"
Detailing Quantropi’s technology, Mr. Nguyen explained that Quantropi QSKD (Quantum Secure Key Distribution), also known as Digital QKD, is a software-based cybersecurity solution designed to securely distribute cryptographic keys over existing internet and telecom infrastructure. It protects data networks from immediate threats like "Harvest Now, Decrypt Later" attacks and future risks posed by quantum computers.
Unlike traditional Optical QKD, which requires expensive dedicated fiber-optic lines and specialized quantum hardware, Quantropi's QSKD is entirely software-defined. It runs on top of standard, existing IP networks (cloud, hybrid, satellite, and RF).
Traditional key exchanges negotiate keys "in-band" along the same path as the data, making them vulnerable to interception. Quantropi’s QSKD sends quantum-grade entropy out-of-band. Endpoints synchronize this entropy and generate identical keys independently without ever passing the actual cryptographic material through the data path.
According to Quantropi, because it bypasses the physical limitations of sending individual photons through glass, Quantropi's digital approach operates over unlimited distances at network speeds, outperforming optical QKD by up to 250x in benchmarks.
The solution supports the ETSI GS QKD 014 protocol standard, allowing it to seamlessly interoperate with enterprise routing and security ecosystems from vendors like Cisco, Palo Alto Networks, Juniper, and Fortinet.
In June of 2026, the company announced the availability of an integrated solution with Nokia that delivers quantum-safe key distribution at scale. The offering combines Quantropi’s Digital Quantum Key Distribution technology with Nokia’s Security Management Server (SMS), providing quantum‑resilient out‑of‑band key distribution for critical networks.
The combined solution has already been successfully deployed within Kirq, Numana’s quantum communication testbed, a neutral and open innovation platform for advanced telecom and quantum communication technologies funded by the governments of Canada and Quebec, demonstrating real‑world performance, interoperability, and readiness for large‑scale adoption.
As Vietnamese enterprises accelerate digital transformation and roll out digital services, data protection and system resiliency must be prioritized alongside tech expansion. As interconnected systems handle growing volumes of data, organizations require robust data governance, security, and resilience frameworks aligned with long-term operational needs.
"Organizations should not wait until quantum computers actively breach today's algorithms before taking action," Mr. Nguyen emphasized. "Auditing data assets, determining required protection lifespans, and establishing a structured post-quantum migration roadmap must begin now."
Google translate