Post Quantum Cryptography for Legal: Protecting Attorney-Client Privilege Against HNDL

Attorney-Client Privilege Has No Expiration Date

Legal communications carry one of the longest confidentiality horizons in any industry. A deposition transcript sealed today can remain privileged for decades. Settlement negotiations, corporate litigation, M&A due diligence, whistleblower matters, and criminal defense files have confidentiality requirements that stretch well past any plausible quantum timeline. That makes law firms a textbook harvest-now-decrypt-later target. If a nation-state or competitor grabs encrypted litigation traffic today and decrypts it in fifteen years with a quantum computer, privilege is dead at the moment that ciphertext is decrypted, not when it was captured.

This guide is written for attorneys, law firm IT, and general counsels who need to understand what Post Quantum Cryptography means for their practice, what the American Bar Association Model Rules actually say about technology, and what to do before Q-Day.

ABA Model Rule 1.1 and 1.6: The Duty

The ABA Model Rules that matter here are 1.1 (Competence) and 1.6 (Confidentiality of Information). Comment 8 to Rule 1.1 requires lawyers to keep abreast of changes in the law and its practice, including the benefits and risks associated with relevant technology. Most US states have adopted this or a similar technology competence duty. Rule 1.6 requires reasonable efforts to prevent unauthorized disclosure of client information.

There is no ABA-specific Post Quantum Cryptography guidance as of April 2026 that we have found. The ABA has not published a formal opinion on PQC. That does not remove the duty. A reasonable lawyer in 2026 who has been told about harvest-now-decrypt-later and still chooses to rely only on RSA or ECDSA for archival confidentiality is arguably violating the technology competence duty.

What Legal Data Needs PQC Protection

Not every byte a law firm produces needs post-quantum protection. The following categories do:

• Client files containing trade secrets, IP, M&A targets, or regulatory strategy.
• Deposition transcripts, especially in matters with long-term reputational consequences.
• Settlement communications that remain confidential under protective orders.
• Privileged communications with foreign clients in industries subject to state surveillance.
• Criminal defense files, especially those involving cooperating witnesses.
• Whistleblower and qui tam intake records.
• Internal firm documents (malpractice claims, HR investigations) with long retention.

The HNDL Threat to Law Firms Specifically

Major law firms have been breached repeatedly over the past decade. Mossack Fonseca (Panama Papers, 2016) was the public turning point, but the pattern is older. Adversaries target law firms because firms sit at the confluence of confidential information across multiple industries. An encrypted-at-rest firm database stolen today by a sophisticated adversary could contain the trade secrets of a dozen Fortune 500 companies. If the encryption is RSA-2048 wrap around AES, a quantum computer breaks it.

What Reasonable Measures Look Like in 2026

For a firm to meet Model Rule 1.6 reasonable efforts in 2026, we would argue the following are baseline:

1. Inventory cryptographic protections across firm IT, DMS (document management), email, and case management.
2. Identify categories of client data with confidentiality lifetimes beyond 15 years.
3. Migrate high-sensitivity archives to Post Quantum Cryptography (ML-KEM hybrid plus AES-256-GCM).
4. Adopt hybrid PQC TLS for external communications where clients support it.
5. Vet cloud vendors (DMS, e-discovery, cloud storage) on PQC roadmap and data-at-rest posture.
6. Document the PQC risk assessment in the firm's cybersecurity policy.

Cloud-Based Practice Management and PQC

Most cloud-based practice management, DMS, and e-discovery vendors encrypt data at rest with AES-256 and wrap the keys with a KMS. The KMS itself uses asymmetric crypto for envelope encryption. If the KMS uses only RSA or ECDH, the envelope is quantum-vulnerable even if the bulk cipher is AES-256. Ask your vendor: does your KMS support ML-KEM hybrid? When? Major cloud KMS products have started shipping hybrid PQC (AWS KMS, Google Cloud KMS) and more will follow.

Email and Secure Messaging for Legal

Attorneys routinely use email for privileged communications, and email is almost always unencrypted end-to-end. If you want real confidentiality, use a PQC-capable secure messaging channel. Signal adopted PQXDH (hybrid X25519 plus Kyber) on September 19, 2023. iMessage deployed PQ3 on February 21, 2024. These are real, deployed, end-to-end PQC-protected channels. For critical communications with a client or witness, a Signal message is more confidential in the quantum era than a firm's Outlook thread.

E-Discovery and the Review Platform

E-discovery platforms host litigation databases for years, sometimes decades. They are precisely the HNDL target. When vendor due-diligence a platform, ask: what is the KMS posture today and what is the PQC roadmap? If you cannot get a straight answer, factor that into your evaluation.

QNSQY for Law Firms

QNSQY is a Post Quantum Cryptography data encryption platform that a law firm can deploy to protect archival data independently of any cloud vendor's roadmap. Sensitive client files, matter-specific archives, internal investigations, and firm IP can all be wrapped in ML-KEM hybrid encryption with ML-DSA signatures, preserving attorney-client privilege beyond any plausible Q-Day.

Frequently Asked Questions

Has the ABA issued PQC-specific guidance?

No ABA-specific Post Quantum Cryptography opinion has been found as of April 2026. Model Rule 1.1 Comment 8 technology competence and Rule 1.6 confidentiality obligations still apply.

Is Signal safe for attorney-client communications?

Signal adopted PQXDH hybrid (X25519 plus Kyber) on September 19, 2023. For sensitive communications it is more confidential than standard email. Always confirm the recipient's identity through a safety number verification.

What about iMessage?

iMessage deployed PQ3 on February 21, 2024, with iOS 17.4 and macOS 14.4 in March 2024. It uses Kyber/ML-KEM and is end-to-end PQC-protected between Apple devices.

Can I rely on my cloud DMS vendor to handle PQC?

Ask for specifics. Many KMS products have started shipping hybrid PQC, but vendor roadmaps vary. If the DMS does not commit to a PQC timeline, consider application-layer PQC encryption for the most sensitive matters.

What is the biggest HNDL risk for a law firm?

Archive databases (DMS, e-discovery, matter-specific file stores) that contain long-lived privileged material protected only by classical asymmetric key wrapping.

Sources

1. ABA Model Rules of Professional Conduct
2. NIST FIPS 203 (ML-KEM)
3. NIST FIPS 204 (ML-DSA)
4. Signal PQXDH Blog
5. Apple iMessage PQ3 Announcement

Related Articles

• Harvest Now, Decrypt Later Threat
• HNDL in Plain English
• PQC for Healthcare/HIPAA
• How to Implement PQC in Your Organization
• PQC for Journalists: Source Protection