Episode #906 of the MSPi PrimeCast
Quantum computing is moving closer to practical use, bringing enormous potential along with new cybersecurity challenges. In his conversation with Joey Pinz, Rajesh Patil of enQase explains how quantum computing differs from classical computing, why current encryption could eventually be vulnerable, and why businesses need to account for uncertainty as technology evolves.
For MSPs, Rajesh’s perspective offers several lessons for understanding what may be ahead and helping clients navigate the changes.
1. Understand Why Quantum Computing Changes the Equation
Traditional computers rely on binary zeros and ones. Rajesh explains that quantum computing works differently, creating the potential to tackle certain complex problems in ways classical computers cannot. He points to areas such as molecular modeling and analyzing large datasets as examples of where quantum computing could offer significant capabilities.
For MSPs, understanding the fundamentals matters because quantum computing could eventually affect both the opportunities and risks their clients face.
MSP Action: Begin building internal knowledge around quantum computing so your team can explain its potential business and security implications to clients in practical terms.
2. Recognize the Encryption Risk Before Q-Day
Rajesh describes Q-Day as the point when a sufficiently capable quantum computer can break classical encryption. The exact timing remains uncertain, but he emphasizes that businesses should consider what would happen if that capability arrives sooner than expected.
The issue is significant because asymmetric encryption is a foundation of the digital world. For MSPs, that makes quantum risk more than a distant technology discussion.
MSP Action: Start introducing quantum-related encryption risk into long-term cybersecurity conversations rather than waiting for Q-Day to make it urgent.
3. Take “Harvest Now, Decrypt Later” Seriously
Rajesh explains that the quantum threat isn’t entirely about what happens in the future. With “harvest now, decrypt later,” attackers can collect encrypted information today and store it with the expectation that future quantum capabilities may allow them to decrypt it.
Information with a long useful life, including personally identifiable information, can be particularly relevant to this risk.
MSP Action: Help clients consider which sensitive information needs to remain protected for years and where long-term confidentiality should influence today’s security decisions.
4. Pay Attention to the Shift Toward Quantum-Safe Cryptography
Rajesh discusses the post-quantum cryptography algorithms released by NIST in 2024. These algorithms are designed to resist attacks from quantum computers and represent an important part of the transition away from cryptography that could eventually become vulnerable.
He also explains that moving an organization toward a quantum-safe state can be a significant undertaking.
MSP Action: Begin learning about post-quantum cryptography and how future cryptographic changes could affect the technologies and environments you manage.
5. Build Crypto Agility Into Long-Term Planning
One of Rajesh’s key points is the importance of crypto agility. Because unknowns remain, organizations may need the ability to replace one cryptographic algorithm with another quickly and without disrupting the business.
Rajesh notes that the broader migration lifecycle can span multiple years depending on an organization’s size and complexity. That makes adaptability especially important.
MSP Action: Consider cryptographic flexibility when evaluating long-term security strategies so future algorithm changes don’t become unnecessarily disruptive projects.
6. Keep Humans in the Loop as AI Advances
Rajesh also discusses the enormous potential of AI. He believes it can handle mundane tasks, analyze large amounts of information, identify patterns, and improve efficiency.
But he doesn’t advocate blind trust. Rajesh emphasizes that AI outputs still need to be vetted and verified, particularly because hallucinations and unintended consequences remain possible.
MSP Action: Use AI to augment your team while maintaining human review and appropriate checks and balances for decisions where errors could affect clients.
7. Learn to Operate With Technological Uncertainty
A theme running throughout Rajesh’s conversation is uncertainty. The exact timing of Q-Day is uncertain. AI continues to evolve. Quantum computing is advancing. Cryptographic standards may need to change again.
Rajesh’s discussion of crypto agility reflects this reality: organizations need to account for unknowns rather than assuming today’s technologies and approaches will remain unchanged.
MSP Action: Build adaptability into technology planning. Instead of trying to predict every development, help clients create strategies that can respond as risks, standards, and technologies evolve.
What This Means for MSPs
Quantum computing doesn’t require MSPs to predict exactly when Q-Day will arrive. Rajesh Patil’s perspective highlights a more immediate priority: understand the technology, recognize the potential encryption risk, account for data that needs long-term protection, and be prepared to adapt.
MSPs that begin developing this knowledge now can be better positioned to have informed conversations as quantum computing, post-quantum cryptography, and AI continue to evolve.
Catch the full conversation on MSPi PrimeCast Episode #906 and connect with Rajesh at https://www.linkedin.com/in/rajeshpatil/