Skip to content

QIF-T0045

critical

Harvest-now-decrypt-later

Tier 2 — Validated (Independently Replicated)

Legacy status: CONFIRMED

Record encrypted BCI traffic now, decrypt when quantum computers arrive (2030-2035). Neural data is permanently sensitive -- can't change your brain like a password. PQC (ML-KEM/Kyber) prevents. 10-20 year implant lifetime > quantum arrival.

Technique Details

Tactic
QIF-D.HV
Status
CONFIRMED
Bands
S3

✚ Therapeutic Application

Collection and storage of encrypted neural data for future decryption when quantum computers become available

Neural Impact

1 of 7 neural bands affected

S3

Drag to rotate. Click a region to learn more.

Click or hover over a glowing region to see the attack techniques targeting it and their severity.

Scoring

NISS v1.1 NISS:1.1/BI:N/CR:L/CD:L/CV:I/RV:F/NP:N
CVSS v4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
2.7Low
BICRCDCVRVNP
 

Governance

Neurorights at Risk

This technique threatens 1 of the 4 proposed neurorights (Ienca & Andorno, 2017).

MP Mental Privacy
Consent Complexity
0.30 / 4.0

FDORA §3305 Compliance

Cyber Device
Regulatory Coverage
0.3 / 1.0
524B Requirements
TM VA SBOM PM
Regulatory Gaps
  • ! CVSS partially captures risk; neural dimensions missing
  • ! No FDA pathway for consumer sensor exploitation
  • ! Software-only attack without software lifecycle standard (IEC 62304)

Population Vulnerability

CRB vulnerability adjustment (γ=0.30) accounts for age, diagnosis severity, consent capacity, and device dependency.

Population NISS Base Adjusted Severity Delta
Adult (Default) 2.7 2.7 Low -
Child (10yr) + ADHD 2.7 3.2 Low +0.48
Adult with ALS 2.7 3.1 Low +0.44

Validation Status

Theoretical / Not yet validated. This technique has not been independently tested. See the validation dashboard for what has been tested.

Qinnovate Neural Security Atlas Edit this on GitHub