Quantum-resistant encryption: Why the VDR industry is preparing for it today.

A quantum computer capable of breaking today’s encryption does not yet exist in practical applications. Nevertheless, the world’s largest institutions—from the U.S. National Institute of Standards and Technology (NIST) to central banks—are already implementing new encryption standards that are resistant to quantum attacks. It’s worth understanding why, because the answer has direct implications for anyone who stores confidential transaction documents today.

The problem isn't in the future; it's in the present.

The key concept in this discussion is “harvest now, decrypt later.” The principle is simple. Encrypted data intercepted today can be stored and left to wait until quantum technology has advanced enough to decrypt it. For data that loses its value after a few months, this is no problem. For transactional documents, non-disclosure agreements, financial data, or intellectual property—which must remain confidential for years, and sometimes decades—it’s a completely different matter.

In other words, the threat does not begin on the day a sufficiently powerful quantum computer is built. It begins right now, the moment data leaves a secure environment encrypted using the old standard.

Why is today's encryption vulnerable?

The encryption methods commonly used today, such as RSA and ECC, derive their security from the fact that certain mathematical problems (such as factoring large numbers) are practically impossible for classical computers to solve within a reasonable amount of time. A quantum computer with sufficient computing power, using Shor’s algorithm, could theoretically solve these problems in a fraction of the time required by today’s machines.

No one can predict exactly when such a computer will be developed. Experts' estimates range from a few dozen to several dozen years. The problem is that even an optimistic scenario poses a real risk for data that must remain confidential over a long period of time.

What steps are already being taken in response?

The U.S. National Institute of Standards and Technology (NIST) has finalized the first post-quantum encryption standards, based on entirely different mathematical problems that remain difficult to crack even for quantum computers. Major financial institutions, government agencies, and technology companies have already begun the process of migrating their infrastructure to these new standards.

This is not yet a mandatory standard across every industry. But the direction is clear: post-quantum encryption is no longer just an academic topic; it is becoming an integral part of security planning for critical infrastructure and systems that store sensitive data.

What does this mean for the VDR industry?

By definition, a Virtual Data Room is a place where confidential transaction documents pass through the hands of many parties over the course of weeks, and sometimes months. Some of these documents—such as commercial contracts, the personal data of employees at the target company, or trade secrets—must remain confidential for much longer than the transaction itself lasts.

This is precisely why VDR providers are now beginning to view encryption architecture not only through the lens of current threats, but also through the lens of whether data encrypted today will remain secure ten or fifteen years from now. The shift toward quantum-resistant algorithms is not a reaction to a current threat, but rather a way to prepare the infrastructure for a scenario whose exact date no one knows, but whose likelihood is growing every year.

Practical advice for companies preparing for a transaction.

For a company selecting a VDR provider, the question of readiness for post-quantum encryption may seem premature today. In practice, however, it’s worth asking it now, especially if the transaction involves data requiring long-term confidentiality—such as patents, license agreements, or personal data subject to protection for many years.

Choosing a provider that is already monitoring the development of post-quantum standards and actively planning the migration of its infrastructure is not merely a matter of following a technological trend. It is a way to safeguard the value of the transaction for a period significantly longer than the due diligence process itself.

About Us

DealDone is a specialized company offering high-quality products in the field of information and data security. We provide digitization services and software for modern technologies related to the handling of confidential information, classified information, and sensitive data, as well as the digitization, protection, encryption, and sharing of data and documents both within and outside the organization.

For over 10 years, DealDone has specialized in providing solutions for the digitization, archiving, and sharing of documents via a Document Management System (DMS) or a Virtual Data Room (VDR).

DealDone independently developed and launched the SECUDO VDR system. SECUDO is a platform for the secure digitization, archiving, exchange, and processing of corporate documents and data, offered in the cloud as a Software-as-a-Service (SaaS) solution for business clients.

DealDone also owns the portals www.platformainwestora.pl and www.sprzedamfirme.com, through which it supports transactional processes related to company sales, raising capital, and finding investors for projects.

In 2025, DealDone joined the international Dealsuite platform (www.dealsuite.com), which supports professionals in the field of mergers and acquisitions (M&A). Thanks to this partnership, we can respond even more effectively to market needs by offering our clients VDR SECUDO—a secure and intuitive solution for managing documentation in transaction processes.