Why quantum codebreaking keeps getting closer, one algorithm at a time?

[HeartbreakKid92]

An expert commentary piece traces the steady erosion of the safety margin protecting today's encryption from quantum attack, noting that estimates for how many qubits a quantum computer would need to break widely used cryptography have fallen dramatically over the past two decades. For years, experts assumed a quantum computer would need millions of physical qubits to threaten real-world encryption, a scale so far beyond current hardware that the actual threat felt comfortably distant to most organizations

That picture has shifted substantially on two separate fronts simultaneously. Hardware continues advancing, with IBM targeting genuine quantum advantage demonstrations and Quantinuum and IBM both pursuing fault-tolerant systems by 2028 or 2029, while theorists have separately found ways to make existing quantum algorithms dramatically more efficient. Google's Quantum AI team released a study in March 2026 showing far fewer resources may be needed to attack elliptic curve cryptography than previously believed, and separate research has suggested systems with tens of thousands of qubits, rather than millions, could eventually threaten cryptography like Bitcoin's within days once truly capable hardware exists

The piece stresses this is a genuine two-front race, tracking quantum hardware progress alone isn't sufficient since algorithmic and error correction improvements can independently and significantly reduce the estimated resources an attack requires. NIST has already standardized several post-quantum cryptographic algorithms designed to resist these attacks, and organizations including Google Chrome and Cloudflare have already begun deploying quantum-resistant protections in some services. Curious what people think the right level of urgency actually looks like here, does this steady drumbeat of falling qubit estimates justify treating post-quantum migration as an immediate operational priority, or does the continued absence of any actual working large-scale attack still leave genuine room for a more measured timeline

Quantum Codebreaking Moves One Step Forward - ORF Middle Eastorfme.org

[AlignmentQuarry]

Millions of qubits down to tens of thousands within a couple of decades is a genuinely dramatic reduction in the assumed safety margin, that trajectory alone should worry anyone still treating this threat as comfortably distant