The Quantum Harvest: RSA Notarization's 10-Year Risk

The cryptographic foundation of digital notarization — RSA-2048 — is not broken today. It will be broken within the next 10–15 years.

This is not a fringe prediction. It is the consensus position of NIST, NSA, and CISA, all of which have issued formal migration guidance recommending immediate transition to Post-Quantum Cryptography (PQC).

What Is a 'Harvest Now, Decrypt Later' Attack?

Adversaries — particularly nation-state actors with long-term strategic interests — do not need to break encryption today. They collect encrypted data now and archive it, waiting for quantum hardware to mature. Once a cryptographically relevant quantum computer (CRQC) becomes operational, they will be able to decrypt everything they have collected retroactively.

For notarized legal documents — deeds, wills, powers of attorney, real estate closing packages — this means a document notarized with RSA signatures today may be unverifiable, forgeable, or fully decrypted by 2035.

Why This Matters for Deeds and Estate Documents

A deed or estate document is not a one-time transaction. It is a permanent legal instrument that may be referenced, contested, transferred, or audited for decades. The integrity of that document must survive not just today's threat landscape, but the threat landscape of 2040.

Legacy notarization platforms built on RSA or ECDSA are not designed for that horizon. Their cryptographic integrity expires.

The SPHINCS+ Solution

EDN's platform applies a SPHINCS+ (SLH-DSA) post-quantum wrapper to every document. SPHINCS+ is standardized by NIST as FIPS 205. Its security rests entirely on the collision-resistance of SHA-256 or SHAKE-256 — hash functions with no known quantum attack that reduces their security below acceptable thresholds.

An EDN-secured document's cryptographic proof is valid under any foreseeable computational model — classical or quantum.

The Regulatory Trajectory

NIST published FIPS 203, 204, and 205 in August 2024, formally standardizing the first generation of PQC algorithms. Federal agencies are mandated to begin migration. Financial institutions are following. Legal infrastructure is next.

Notarization platforms that do not migrate will face a compliance cliff. EDN was built to be on the right side of that cliff from day one.