TL;DR: Not yet, but the clock is ticking. Quantum computers will eventually break today’s RSA and ECC encryption, yet post-quantum cryptography standards are already being deployed to neutralize the threat.
The cryptographic foundations securing global commerce rest on a simple assumption: factoring large numbers and solving discrete logarithms is computationally infeasible. Quantum computers threaten that assumption. Google’s 2019 supremacy demonstration and IBM’s 1,121-qubit Condor processor signal accelerating momentum. IBM projects a 100,000-qubit system by 2033, while Boston Consulting Group estimates quantum computing could create $450–850 billion in economic value by 2035.
If you want to dig deeper, check out our guide on 5 Simple Lifestyle Hacks for a Happier, Healthier You.
The Threat to RSA and ECC
Shor’s algorithm, published in 1994, can theoretically break RSA-2048 and elliptic-curve cryptography in hours rather than billions of years. Current machines lack the millions of error-corrected qubits required, so no immediate breach exists. The real danger is “harvest now, decrypt later” — adversaries stockpiling encrypted data today to decrypt once hardware matures.
Dr. Michele Mosca, co-founder of the Institute for Quantum Computing, offers his widely cited rule: if data must remain secure for x years and migration takes y years, worry when x + y exceeds the time until quantum computers arrive.
Post-Quantum Cryptography Arrives
In 2024, NIST finalized its first post-quantum standards: ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205). The NSA’s CNSA 2.0 suite mandates PQC migration for national security systems by 2033. Cloudflare, Google Chrome, and Apple’s iMessage have already rolled out hybrid key exchanges combining classical and quantum-resistant algorithms. Markets reflect the urgency: PQC spending is projected to exceed $3 billion annually by 2030.
Experts remain divided on timelines. Some, like researcher Scott Aaronson, caution that cryptographically relevant quantum computers remain years — perhaps decades — away. Others warn that underestimating progress is the costliest mistake an enterprise can make.
The consensus prediction: classical encryption won’t vanish, but it will be retired from high-value use by the mid-2030s. Organizations that inventory cryptographic assets now will weather the transition; those that wait risk exposure during the most dangerous window — the migration itself.
FAQ
Q: When will quantum computers actually break RSA?
A: Most experts estimate a cryptographically relevant quantum computer arrives between 2030 and 2040, though no one can confirm an exact date.
Q: Should businesses stop using AES encryption?
A: No. AES-256 remains quantum-resistant when paired with larger keys; the urgent priority is replacing RSA and ECC in key exchange and digital signatures.
Q: What is the first step toward quantum-safe security?
A: Conduct a cryptographic inventory to identify where RSA and ECC are used, then begin migrating to NIST-approved post-quantum algorithms via hybrid deployments.
Leave a Reply