Quantum Computers vs Encryption: What Washington Must Do

Yes, quantum computers could break today’s encryption, and Washington needs to prepare now by transitioning to post-quantum cryptography before large-scale quantum machines arrive. This article explains the threat, the timeline, and the concrete steps the U.S. government and organizations should take to protect sensitive data.

Formula

The risk window is the sum of the time until a quantum computer can break RSA/ECC and the number of years your data must stay secret. Risk window = Y + S, where Y is years until quantum threat, and S is data sensitivity in years. The result tells you how many years you have to migrate before your encrypted data becomes vulnerable.

Worked Example

Using the default values: Y = 10 years, S = 5 years. Risk window = 10 + 5 = 15 years. So if you have data that must stay secret for 5 years, and quantum computers arrive in 10 years, you have 15 years to transition to post-quantum encryption.

Background: Why Encryption Is at Risk

Today’s internet security relies on public-key cryptography—specifically RSA and Elliptic Curve Cryptography (ECC). These systems are based on math problems that classical computers find hard: factoring large numbers and computing discrete logarithms. Quantum computers, however, can solve these problems exponentially faster using Shor’s algorithm. A sufficiently large quantum computer could decrypt traffic, forge digital signatures, and break TLS/SSL, VPNs, and many other protocols.

How Quantum Computers Break Encryption

Shor’s algorithm, developed by Peter Shor in 1994, runs on a quantum computer and can factor large integers and compute discrete logs in polynomial time. This means that a quantum computer with enough stable qubits could break RSA-2048 and ECC-256 in hours, whereas classical computers would take billions of years. The threat is not just theoretical—the U.S. National Institute of Standards and Technology (NIST) has been working on post-quantum cryptographic standards since 2016, and in 2024 finalized the first three standards (ML-KEM, ML-DSA, and SLH-DSA).

Why Washington Must Act Now

The urgency comes from the “harvest now, decrypt later” threat. Adversaries can already collect encrypted data and store it until a quantum computer is available. This means data that is sensitive today—like government secrets, financial records, or health data—could be decrypted in the future. Even if a quantum computer is 10-20 years away, data that needs to remain confidential for decades is at risk now. The U.S. government has issued mandates, like the 2022 Quantum Computing Cybersecurity Preparedness Act, requiring federal agencies to inventory their cryptographic systems and plan for migration.

How to Prepare: Steps for Organizations

• Inventory cryptographic assets: Identify all systems using RSA or ECC, including TLS certificates, code signing, and VPNs.
• Prioritize by risk: Focus on data with long confidentiality requirements, such as classified documents, health records, and intellectual property.
• Adopt NIST-approved post-quantum algorithms: Start with ML-KEM for key exchange and ML-DSA or SLH-DSA for signatures.
• Plan for hybrid modes: Use both classical and post-quantum algorithms during transition to maintain compatibility.
• Update cryptographic policies and training: Ensure staff understand the migration timeline and procedures.

Common Problems and Misconceptions

One common misconception is that quantum computers are already here, but that’s not true. Current quantum computers have far too few qubits and too much error to run Shor’s algorithm on any meaningful key size. However, the threat is real for the future. Another issue is that many organizations think they have plenty of time, but the migration process is complex and can take years for large systems. Also, some believe that symmetric encryption like AES is also broken, but quantum computers only halve the effective key size (via Grover’s algorithm), so AES-256 remains secure with a 128-bit security level.

Comparisons: Quantum vs. Classical Encryption

Classical encryption (RSA, ECC) relies on mathematical hardness that classical computers can’t crack. Quantum encryption (post-quantum algorithms) uses problems like lattice-based cryptography, which is believed to be hard for both classical and quantum computers. The key difference is that post-quantum algorithms have larger key sizes and slower performance, but they are designed to resist quantum attacks. For example, ML-KEM key exchange has public keys of about 800 bytes, compared to RSA’s 256 bytes, but it’s still fast enough for most applications.

Costs and Timeline of Migration

Migrating to post-quantum cryptography is not cheap. It involves updating software, hardware, and protocols across the entire IT infrastructure. Costs include new certificates, firmware updates, and potential performance overhead. The timeline is estimated to be 10-20 years for full migration, but critical systems should start now. NIST has provided a timeline for federal agencies, with milestones for inventory and implementation. The longer you wait, the more expensive and risky the transition becomes.

Safety and Alternatives

While post-quantum algorithms are being standardized, there are alternatives like quantum key distribution (QKD), which uses quantum mechanics to securely share keys. However, QKD requires specialized hardware and is not practical for widespread internet use. The most practical approach is to adopt NIST’s post-quantum standards. For now, organizations should also keep using strong classical encryption (AES-256) and ensure proper key management. It’s also crucial to stay updated on NIST guidance and industry best practices.

Frequently Asked Questions

When will quantum computers actually break encryption?

Experts estimate that a quantum computer capable of breaking RSA-2048 could be built within 10-20 years, but it’s uncertain. The technology is advancing rapidly, but significant engineering challenges remain, such as error correction and qubit stability. Some governments and companies are investing heavily, so it could happen sooner.

Is my data already at risk?

If your data is encrypted today and an adversary captures it, they could store it and decrypt it later when quantum computers are available. This is the “harvest now, decrypt later” threat. If your data needs to remain confidential for decades, it is at risk now.

What is the difference between quantum computing and post-quantum cryptography?

Quantum computing is the technology that could break current encryption. Post-quantum cryptography is a set of new algorithms designed to be secure against quantum attacks. They are not the same—quantum computers are the threat, and post-quantum algorithms are the solution.

Will my current encryption become useless overnight?

No, it won’t be overnight. The transition will be gradual, and hybrid modes will allow both old and new algorithms to work together. However, once a quantum computer is built, any data encrypted with RSA or ECC that is intercepted after that point will be vulnerable. So it’s better to migrate before then.

What can I do as an individual?

As an individual, you can’t change the encryption used by websites, but you can stay informed and use services that adopt post-quantum security. For personal data, use strong passwords and enable two-factor authentication. For businesses, start the migration process now.

Related

• Best EQ Settings for TDM Neo: Clearer Vocals & Bass
• How to Host a V Rising Server: Full Guide
• Client Discovery Questionnaire: 25 Questions

in t | Years until quantum threat | years | 10 | 0
in d | Data sensitivity (years) | years | 5 | 0
out risk | Risk window (years) | years | t + d | 0