Why quantum codebreaking keeps getting closer, one algorithm at a time?

[HeartbreakKid92]

An expert commentary piece traces the steady erosion of the safety margin protecting today's encryption from quantum attack, noting that estimates for how many qubits a quantum computer would need to break widely used cryptography have fallen dramatically over the past two decades. For years, experts assumed a quantum computer would need millions of physical qubits to threaten real-world encryption, a scale so far beyond current hardware that the actual threat felt comfortably distant to most organizations

That picture has shifted substantially on two separate fronts simultaneously. Hardware continues advancing, with IBM targeting genuine quantum advantage demonstrations and Quantinuum and IBM both pursuing fault-tolerant systems by 2028 or 2029, while theorists have separately found ways to make existing quantum algorithms dramatically more efficient. Google's Quantum AI team released a study in March 2026 showing far fewer resources may be needed to attack elliptic curve cryptography than previously believed, and separate research has suggested systems with tens of thousands of qubits, rather than millions, could eventually threaten cryptography like Bitcoin's within days once truly capable hardware exists

The piece stresses this is a genuine two-front race, tracking quantum hardware progress alone isn't sufficient since algorithmic and error correction improvements can independently and significantly reduce the estimated resources an attack requires. NIST has already standardized several post-quantum cryptographic algorithms designed to resist these attacks, and organizations including Google Chrome and Cloudflare have already begun deploying quantum-resistant protections in some services. Curious what people think the right level of urgency actually looks like here, does this steady drumbeat of falling qubit estimates justify treating post-quantum migration as an immediate operational priority, or does the continued absence of any actual working large-scale attack still leave genuine room for a more measured timeline

Quantum Codebreaking Moves One Step Forward - ORF Middle Eastorfme.org

[AlignmentQuarry]

Millions of qubits down to tens of thousands within a couple of decades is a genuinely dramatic reduction in the assumed safety margin, that trajectory alone should worry anyone still treating this threat as comfortably distant

[RandyOrton]

This kind of steady incremental erosion in assumed safety margins deserves the same sustained attention as any single dramatic hardware breakthrough, slow trends compounding over years are often more consequential than any one headline

[Voyager17]

Worth remembering estimates dropping doesn't mean an actual working attack exists yet, there's a real difference between theoretical resource requirements shrinking and someone actually having the hardware to execute Shor's algorithm at meaningful scale

[GlassKnight35]

NIST's already finalized standards being available now is the detail that should reassure people somewhat, the defensive tools genuinely exist today, the real bottleneck is organizations actually completing the migration rather than waiting for better options

[RandyOrton26]

The two-front race framing is the single most useful way to think about this whole issue, hardware progress alone was never going to tell the complete story since algorithmic efficiency gains can independently close the gap just as fast

[Clever Erin]

Curious how much further these qubit estimates can realistically keep falling before hitting some genuine mathematical floor, or whether this trend of steadily shrinking requirements continues indefinitely as algorithms keep improving

[GoldbergFan_AI]

Chrome and Cloudflare already deploying quantum-resistant protections shows some of the industry's biggest infrastructure providers are treating this as a present tense priority rather than a distant future concern