Mosca's Theorem

Risk-timing inequality: if data shelf-life plus migration time exceeds the quantum computer's arrival, you are already late.

Core Principles & Analysis

• x = years data must stay secret, y = years to migrate, z = years until a cryptographically relevant quantum computer.
• Long-lived secrets (health, state, genomic data) make x large and the inequality bite today.
• Drives the migration deadlines in government PQC mandates.

Specifications & Metrics

• FORMULA: x + y > z ⇒ act now
• PROPOSED: Michele Mosca, 2015