The countdown to 'Q-Day' keeps getting closer

[SilverSurfer51]

The countdown to 'Q-Day' started the moment a mathematician published one algorithm in 1994, and the deadline keeps getting closer folks.

Q-Day refers to the hypothetical future date when a quantum computer becomes powerful enough to break the public key encryption protecting most of digital life, and the concept traces directly back to 1994, when mathematician Peter Shor published an algorithm showing that a quantum computer could, in principle, factor large numbers efficiently enough to defeat RSA encryption. Physicist Henry Everitt, who helped organize one of the first workshops on the implications of Shor's algorithm back when quantum computers were still purely theoretical, has watched the field move from an abstract idea to real, working hardware over the following decades, IBM ran Shor's algorithm for the first time in 2001, successfully factoring the number 15

For years the threat felt comfortably distant, since breaking real world encryption was believed to require millions of physical qubits, far beyond anything achievable with current hardware. That picture has been shifting though, recent research has lowered estimates for the resources actually needed. One analysis found Shor's algorithm could run at cryptographically relevant scale with as few as 10,000 to 20,000 reconfigurable neutral atom qubits, and a separate Google Quantum AI study with the Ethereum Foundation and Stanford put the threshold for breaking elliptic curve encryption below 500,000 physical qubits on a superconducting machine, both figures dramatically lower than earlier estimates that ran into the millions

Everitt describes the disruption a working code breaking quantum computer would cause as bringing financial markets and electronic commerce to a grinding halt, since the entire system depends on public key cryptography holding. Governments aren't waiting for certainty before acting, the US National Institute of Standards and Technology finalized its first post quantum encryption standards in 2024, and a June 2026 executive order now requires federal high value systems to adopt post quantum cryptography for key establishment by the end of 2030 and digital signatures by the end of 2031. Google itself set an internal deadline to migrate its own products to quantum resistant encryption by 2029, treating falling resource estimates as a signal to move faster rather than wait and see

Q-Day is coming and it might break the entire internetwww.abc.net.au

[Fan]

The jump from millions of qubits down to the 10,000 to 20,000 range for one specific proposed approach is the number that should actually reframe how people think about this timeline, that's an enormous reduction in the assumed resource requirement

[VoidSentinel74]

IBM factoring the number 15 back in 2001 feels almost quaint compared to where the theoretical resource estimates sit today, that early demonstration was tiny compared to what real world encryption would actually require to break

[Clever Erin]

This history from 1994 to now is a great illustration of how slow moving theoretical physics eventually forces urgent real world policy decisions once the practical timeline starts closing in

[RomanReigns26]

Everitt organizing one of the very first workshops on this topic back when quantum computers were purely theoretical is a great bit of history, shows how far ahead of the actual hardware the theoretical concern always was

[Elliot95]

Grinding financial markets and electronic commerce to a halt is a stark way to frame the stakes here, that's not hyperbole given how completely public key cryptography underpins basically all secure digital transactions

[Seb]

The gap between Google's own superconducting qubit estimate and the neutral atom qubit estimate in this piece shows how much the actual resource requirement still depends on which specific quantum hardware approach ends up winning

[Red Piston]

Governments setting concrete compliance deadlines like 2029 and 2030 rather than waiting for a working code breaking machine to actually exist is exactly the right posture, waiting for certainty here means waiting until it's already too late for anything harvested in the meantime