DEV Community

Cover image for Europol's Quantum Warning: What It Means for Messaging
ztext_zksnarks
ztext_zksnarks

Posted on Originally published at z-text.org

Europol's Quantum Warning: What It Means for Messaging

H1: Europol's Quantum Warning: What "Harvest Now, Decrypt Later" Means for Private Messaging

Subtitle: Europol says encrypted data collected today could face future quantum decryption. Here's what post-quantum messaging means, what ML-KEM-768 actually protects, and where Z-TEXT fits.

Intro
Z-TEXT is a privacy messenger built on the BitcoinZ blockchain, with no phone number, no email and no SIM. On October 7, 2026, Europol published two reports on the quantum threat. This article explains what they say, what it means for private messages, and what Z-TEXT does, and doesn't, protect.

❓ 1. What did Europol announce on October 7, 2026?
Europol's European Cybercrime Centre published two reports. The first, "Quantum computing and cryptocurrencies", names crypto wallets as the main point of exposure, not blockchains. The second, "Harvest Now, Decrypt Later", was written with Carlos III University of Madrid. Both recommend preparing now, before a deadline appears.
Source: europol.europa.eu/publications-events/publications/quantum-computing-and-cryptocurrencies

❓ 2. What does "harvest now, decrypt later" mean?
An attacker copies encrypted data today and stores it. No quantum computer is needed for that step. Once a powerful enough quantum computer exists, the attacker decrypts the archive.

❓ 3. Why do encrypted messages have long-term value?
A message about a source, a deal or a health problem can still matter in 10 years. The EU's three financial supervisors (EBA, EIOPA, ESMA) warned in September 2026 that anything intercepted today with long-term value is already at risk.
Source: decrypt.co/379167

❓ 4. Why does post-quantum cryptography matter now?
Moving to new cryptography takes years. Estimates for Q-Day, the day a quantum computer breaks today's public-key cryptography, run from 2030 to 2032 or later. The EU recommends that member states adopt a post-quantum migration strategy by the end of 2026.

❓ 5. What is ML-KEM-768?
ML-KEM is a key encapsulation mechanism: a way for two people to agree on a secret key. It is designed to resist attacks from quantum computers. 768 is the mid-level parameter set.

❓ 6. What does NIST FIPS 203 mean?
FIPS 203 is the US government standard that defines ML-KEM. NIST published it in August 2024 as one of its first post-quantum standards.
Source: nvlpubs.nist.gov/nistpubs/fips/nist.fips.203.pdf

❓ 7. How do today's messengers approach the problem?
Signal added post-quantum key exchange (PQXDH) in 2023 and a post-quantum ratchet (SPQR) in 2025. Apple added PQ3 to iMessage in 2024. Both protect message content, and both tie your account to a phone number or an Apple ID.
Sources: signal.org/blog/spqr · thehackernews.com/2024/02/apple-unveils-pq3-protocol-post-quantum.html

❓ 8. How does Z-TEXT approach it?
Z-TEXT protects three layers:

Who: zk-SNARKs (zero-knowledge proofs) hide who is talking to whom on the BitcoinZ blockchain.
What: Z-TEXT encrypts every one-to-one message with a hybrid key that combines X25519 and ML-KEM-768 (NIST FIPS 203) before the message is written to the blockchain. Recording the chain today and breaking classical cryptography later is not enough to read it.
You: no phone number, no email, no SIM. Your identity is a 24-word seed.
Source: z-text.com/docs/security

❓ 9. What does Z-TEXT protect, and what doesn't it?
Protected against quantum decryption: one-to-one message content.
Not yet quantum-resistant:

Channels and Communities (classical key exchange)
The BitcoinZ shielded layer and the wallet (classical cryptography, set by the BitcoinZ network, not by Z-TEXT)
Signatures (still classical Ed25519)
Also: shielding hides sender and receiver on-chain, but not network data like IP address or timing. And the Z-TEXT zk-SNARKs messenger has not been independently audited yet.

❓ 10. Why does decentralised messaging change the threat model?
Z-TEXT has no central message server. Messages live on the BitcoinZ blockchain, copied on every node, and no one can delete them. That also means anyone can harvest them, forever. This is exactly why the quantum-resistant lock on the message itself matters: the chain is public, so the message has to stay unreadable on its own.

❓ 11. Sources

Europol, Quantum computing and cryptocurrencies (Oct 7, 2026)
EU supervisors' warning, via Decrypt (Sep 2026)
NIST FIPS 203
Signal, SPQR · Apple PQ3, via The Hacker News
Z-TEXT security docs: z-text.com/docs/security
Earlier Z-TEXT article: z-text.org/quantum-attack-z-text-wallet-messages-2026/
BitcoinZ: getbtcz.com

Ending: Message today. Still protected tomorrow.
Download Z-TEXT for Android, macOS, Windows or Linux: z-text.com/downloads

Top comments (1)

Collapse
 
ztext_zksnarks profile image
ztext_zksnarks •

Some comments may only be visible to logged-in visitors. Sign in to view all comments.