Could assets signed only classically before migration become vulnerable once quantum computers emerge?

Yes—this is a serious concern, and it's known as the "harvest now, decrypt later" threat [AG-2024.05-2225].

Here's the vulnerability: RSA and Elliptic Curve Cryptography (ECC), which protect most digital signatures and key exchanges today, rely on the hardness of factoring large numbers or computing discrete logarithms [AG-2024.05-2225]. Shor's algorithm—a quantum algorithm—can solve both problems efficiently [AG-2024.05-2225]. An adversary with a sufficiently powerful quantum computer could factor the keys that signed your assets classically, forge new signatures, and potentially steal or redirect them.

The timeline matters. Quantum computers powerful enough to threaten current cryptography "are likely to be available in a couple of years" according to current expert assessments [AG-2024.05-2225], though other analyses suggest the risk window remains uncertain [AG-2024.01-2022]. But the attack doesn't require waiting: adversaries can collect encrypted communications or signed transactions *today* and crack them later once quantum hardware materializes. For long-lived assets (like blockchain holdings or digitally signed deeds), this "harvest now, decrypt later" strategy is especially dangerous [AG-2024.02-1291].

The solution is migration to post-quantum cryptography—schemes based on problems believed to resist both classical *and* quantum attacks, such as lattice-based cryptography [AG-2024.05-2225]. Algorithms like Kyber (for key encapsulation) and Dilithium (for signatures) are now being standardized [AG-2024.05-2225] and incorporated into blockchain systems [AG-2024.02-1291]. The challenge is that migrating legacy systems—especially "low-computational" industrial infrastructure—is expensive and technically complex [AG-2024.01-1401].

The critical infrastructure and blockchain communities are already moving: governments and industry are actively adopting post-quantum standards [AG-2024.05-2225, AG-2024.02-1291]. If you hold classically signed assets, the prudent step is to migrate them to quantum-resistant signatures *before* large quantum computers exist.