Mosca's Inequality Calculator
The classic framework (Dr. Michel Mosca, 2015) for deciding when to start migrating: if the years your data must stay confidential (X) plus the years your migration takes (Y) exceed the years until a quantum computer can break today's crypto (Z), you're already exposed.
10 + 4
X + Y
10
Z
How many years does this data need to stay confidential?
How many years will it realistically take your organization to fully migrate to post-quantum algorithms?
A threat estimate, not a certainty: public estimates range from vendor roadmaps targeting about 2029 to expert surveys of 10-20 years. Qypher's scan reports assume the near end (about 4 years), the cautious choice; set your own here.
Exposure Timeline
You needed to start migrating ~4 years ago.
By the time a cryptographically-relevant quantum computer arrives, data you're protecting today with classical algorithms will still need to be confidential, and an adversary recording your traffic now can decrypt it retroactively the moment that computer exists.
Quantum Threat Timeline
Real, dated milestones informing (not mechanically determining) the Z estimate above. Nobody knows exactly when a cryptographically-relevant quantum computer will exist. Manually reviewed and sourced, not auto-generated.