A quantum physicist named David Bohm said something that should keep every CISO up at night:
"Matter is frozen light."
— David Bohm, Physicist
He wasn't being poetic. He was describing physics. E=mc² doesn't say energy can become matter. It says matter never was anything else. Mass is energy that got confined. Slowed down. Trapped into stable patterns.
Your body is made of particles that have no mass — gluons, moving at relativistic speeds, confined in spaces smaller than an atom. That confinement is what creates the illusion of solidity. Take away the confinement, and the mass disappears. The energy remains, but the structure is gone.
Ice melts. Always has. Always will.
I've been thinking about this because I just watched a breakdown of how light and confinement work at the quantum level, and it hit me: encryption works the exact same way.
Encryption Is Mathematical Confinement
When you encrypt data, you're not hiding it. You're confining it.
RSA-2048 takes your readable information and wraps it inside a mathematical structure so complex that brute-forcing the solution would take a classical computer longer than the age of the universe. The data is still there. It's just locked inside a pattern that no classical machine can unravel in practical time.
Think of it like freezing water. The H₂O molecules don't disappear when water becomes ice. They just lock into a rigid crystalline structure. The substance is unchanged. Only the arrangement is different.
Your encrypted patient records? Same data. Same bits. Just confined inside mathematical ice.
And ice melts.
Quantum Computing Is the Heat
Classical computers try to break encryption by checking every possible key, one at a time. It's like trying to melt a glacier with a match. Technically possible. Practically useless.
Quantum computers don't work that way.
Shor's algorithm — the quantum method for breaking RSA — doesn't try every key. It exploits the mathematical structure itself. It finds patterns in the confinement and unravels them from the inside.
It's not a bigger match. It's a change in temperature. A phase change.
When a quantum computer with enough stable qubits runs Shor's algorithm against RSA-2048, it won't slowly chip away at the encryption. The mathematical confinement will dissolve. The data won't be damaged. It'll be perfectly intact — just no longer frozen. No longer private. No longer yours.
Same data. New arrangement. That's a phase change.
The Physics Are Identical
This isn't just an analogy. The physics of confinement and the mathematics of encryption share structural DNA.
In quantum chromodynamics: massless gluons get trapped by the strong nuclear force in a space one femtometer wide. That confinement creates mass — something from nothing. The confinement IS the substance.
In cryptography: readable information gets trapped by mathematical operations in a computational space that's practically infinite to traverse. That confinement creates privacy — security from exposure. The encryption IS the protection.
Both depend on the same principle: confinement turns something accessible into something stable.
And both have the same vulnerability: confinement is not permanent.
Gluons stay confined because the strong nuclear force is... strong. But at extreme energies — inside particle accelerators, during the first microseconds after the Big Bang — even quarks and gluons break free. It's called quark-gluon plasma. The confinement dissolves, and the particles move freely.
RSA keys stay confined because the mathematical operations are... hard. But with a fundamentally different computational approach — quantum computing — those operations become tractable. The mathematical confinement dissolves, and the data moves freely.
Same physics. Different scale.
"Harvest Now, Decrypt Later" Is Collecting Ice Before the Thaw
Here's where this stops being a physics lesson and starts being a threat briefing.
Right now, nation-state actors and sophisticated criminal organizations are intercepting encrypted data transmissions. They can't read them today. They know that. They're storing them anyway.
Think about what they're doing: collecting frozen data and storing it in warehouses, waiting for the temperature to rise.
Every encrypted healthcare record transmitted today over standard TLS is a block of ice with patient data frozen inside. Every VPN tunnel carrying financial data. Every secure email between executives discussing M&A strategy.
Being collected. Being stored. Being patient.
Google just demonstrated logical qubits — error-corrected quantum computation. Microsoft claims a million qubits on a palm-sized chip. The quantum computing energy efficiency improvements that make these machines commercially viable are the same improvements that raise the temperature.
The thaw isn't hypothetical. It's on a roadmap. Multiple roadmaps.
Why Healthcare Data Is the Highest-Value Ice
A credit card number expires in 3 years. If someone decrypts your credit card transaction from 2024 in 2032, the number is dead. Inconvenient but manageable.
A patient's genomic data never expires. Their mental health records from 2024 will still be sensitive in 2074. Their HIV status. Their genetic predispositions. Their reproductive history.
Healthcare data is frozen in the thickest ice because it needs to stay frozen the longest. And that's exactly why it's the most valuable target for harvest-now-decrypt-later.
When the thaw comes — and it will come — the data that suffers the most isn't the stuff with a 3-year shelf life. It's the data that was supposed to stay frozen forever.
50 years of patient records. Exposed. Not because of a hack. Because of physics.
What Melting Looks Like
Here's something that might help make this concrete.
When your RSA-2048 encryption gets broken by a quantum computer, here's what doesn't happen:
- Dramatic alert on your screen
- Sirens, red lights, "BREACH DETECTED"
- Anything visible at all
Here's what does happen:
- Someone who already has your encrypted data runs it through a quantum decryption process
- Your plaintext appears on their screen
- They now have every record, every name, every diagnosis
- You never know it happened
The ice melts silently. There's no alarm for a phase change that happened to data someone copied five years ago.
This is why waiting for Q-Day to start migrating is like waiting for the flood to buy sandbags.
NIST Already Published the New Freezer
Post-quantum cryptography standards exist. NIST finalized them — FIPS 203, 204, and 205. These are algorithms designed to resist quantum attacks. They're the new confinement — mathematical structures that quantum computers can't unravel the way they unravel RSA and ECC.
- FIPS 203 (ML-KEM): Lattice-based key encapsulation. Your new key exchange mechanism.
- FIPS 204 (ML-DSA): Lattice-based digital signatures. Your new authentication.
- FIPS 205 (SLH-DSA): Hash-based digital signatures. Your backup standard.
These aren't theoretical. They're published. They're implementable. The migration can start today.
But here's the thing about migration: you can't migrate what you haven't inventoried.
Most organizations don't know where RSA and ECC live in their infrastructure. It's in certificates, key stores, VPN configurations, API authentication, database encryption, email systems, medical device firmware, legacy applications nobody's touched in years.
You have to find every piece of ice before you can move it to the new freezer.
What to Do Right Now
Step 1: Cryptographic Inventory
Find every instance of quantum-vulnerable cryptography in your environment. RSA, ECC, DES, SHA-1, hardcoded keys, weak TLS configurations. You can't protect what you can't see.
Step 2: Data Classification
Which data has the longest sensitivity window? Healthcare records, IP, government communications, financial instruments — prioritize by how long the data needs to stay frozen.
Step 3: Migration Roadmap
Map a path from your current cryptographic implementations to NIST post-quantum standards. This isn't a one-day project. It's a multi-year program. Start now.
Step 4: Stop Adding to the Pile
Every new system deployed with RSA-2048 today is another block of ice that will melt. New deployments should be crypto-agile at minimum, PQC-ready where possible.
The Takeaway
Physics built the universe by confining energy into stable patterns. We built digital security by confining information into stable mathematics.
Both forms of confinement are temporary. The universe will eventually reach heat death. Your RSA keys will eventually face quantum computation.
The difference: you can prepare for one of those.
David Bohm was right. Matter is frozen light. And your encrypted data is frozen trust.
Make sure you've got somewhere to put it when the temperature rises.
📖 Get the Complete Quantum Security Playbook
125,000+ words of actionable implementation guidance for healthcare organizations preparing for the quantum threat. Migration roadmaps, cryptographic inventories, HIPAA compliance mapping, and executive briefing templates.