What is Quantum Computing’s Impact on Cybersecurity?

Imagine a computer that could crack the code protecting your bank account in hours instead of billions of years. That’s the promise—and the threat—of quantum computing. Here’s what you need to know.

If you’ve heard the phrase “quantum computing will break encryption” and wondered whether to panic, you’re asking the right question. The short answer: not today, but sooner than you might think. And the time to prepare is now.

Let me walk you through what quantum computing means for cybersecurity, why current encryption is at risk, and what’s being done about it—all without the jargon overload.

Quantum Computing 101: A Different Kind of Machine

Before we dive into the security implications, let’s demystify quantum computing.

Traditional computers—the laptop on your desk, the phone in your pocket, the servers powering the internet—work with bits. A bit is either a 0 or a 1. Think of it like a light switch: on or off, no in-between.

Quantum computers use qubits (quantum bits). Here’s where it gets weird in a wonderful way:

Superposition: A qubit can be 0, 1, or both simultaneously. Imagine flipping a coin that’s both heads and tails until you look at it. Once observed, it “collapses” to one state.

Entanglement: Two qubits can be linked so that measuring one instantly affects the other, even across distances. Einstein called this “spooky action at a distance.”

Quantum interference: Quantum algorithms manipulate probability amplitudes to make correct answers more likely and wrong answers less likely.

Why does this matter? For certain problems, quantum computers can explore multiple solutions simultaneously rather than sequentially. This gives them exponential speedups for specific tasks—including breaking the mathematical problems behind modern encryption.

What Quantum Computers Can and Can’t Do

Quantum computers aren’t just “faster regular computers.” They’re fundamentally different machines that excel at specific problem types:

• Simulating molecules and materials (drug discovery, materials science)
• Optimization problems (logistics, financial modeling)
• Breaking certain types of encryption (the focus of this article)

But they’re terrible at everyday tasks like browsing the web or editing documents. Your phone isn’t getting replaced by a quantum chip anytime soon.

The key insight: quantum computers use different algorithms entirely. One of these algorithms—discovered in 1994 by mathematician Peter Shor—is why cybersecurity professionals are losing sleep.

The Threat to Current Encryption: RSA, ECC, and Shor’s Algorithm

Here’s the uncomfortable truth: most of the encryption protecting your online banking, your encrypted messages, your digital signatures relies on mathematical problems that quantum computers can solve trivially.

Let’s break this down.

How Modern Encryption Works

Today’s public-key cryptography—the foundation of secure internet communication—relies on mathematical problems that are easy to create but incredibly hard to solve without the secret key:

RSA (Rivest-Shamir-Adleman): Based on the difficulty of factoring large numbers. If I give you the product of two massive prime numbers, finding those original primes is computationally infeasible for classical computers. A 2048-bit RSA key would take classical computers millions of years to crack.

ECC (Elliptic Curve Cryptography): Based on the difficulty of solving the discrete logarithm problem on elliptic curves. ECC provides similar security to RSA with smaller key sizes, making it popular for mobile devices and modern systems.

These algorithms protect:
– HTTPS connections (the padlock in your browser)
– Digital signatures (verifying software downloads, documents)
– VPN tunnels
– Cryptocurrency transactions
– Secure email (PGP, S/MIME)
– SSH keys for server access

Enter Shor’s Algorithm

In 1994, Peter Shor discovered that a sufficiently powerful quantum computer could factor large numbers and solve discrete logarithm problems efficiently. What takes classical computers millions of years, a quantum computer could solve in hours.

The math: Shor’s algorithm finds the prime factors of an integer in polynomial time. For a quantum computer with thousands of stable logical qubits, breaking RSA-2048 or ECC-256 becomes trivial.

This isn’t theoretical. The algorithm exists. We just don’t have hardware powerful enough to run it—yet.

How Close Are We?

Current quantum computers (as of 2024-2026) have roughly 1,000 physical qubits with high error rates. Breaking RSA-2048 would require:
– Approximately 4,000 stable logical qubits
– Millions of physical qubits (for error correction)
– Hours of sustained computation with extremely low error rates

That’s a gap of about 4,000x in qubit count. But here’s the concerning part: the gap is shrinking faster than expected.

Recent algorithmic improvements reduced the estimated qubits needed to break RSA-2048 from about 20 million (2021 estimates) to under 1 million (2025 estimates). The target keeps getting easier to hit.

Expert Predictions on the Timeline

Most experts estimate that a Cryptographically Relevant Quantum Computer (CRQC)—one powerful enough to break RSA and ECC—will emerge between 2030 and 2040.

Some perspective:
– Conservative estimates: 15-20 years
– Optimistic estimates: 5-10 years
– The consensus: We need to be prepared well before 2035

But here’s the critical insight that makes this urgent today.

The Real Deadline: “Harvest Now, Decrypt Later”

The most important concept in quantum security isn’t when quantum computers arrive—it’s that the threat already exists.

Harvest now, decrypt later (also called “store now, decrypt later”) is a straightforward attack:

1. An adversary captures and stores encrypted data today using classical computers
2. They wait for quantum computers to arrive (5, 10, 15 years)
3. They decrypt the stored data retroactively

Any data that needs to remain confidential for years is already at risk:
– Medical records (protected for decades)
– Financial data and trade secrets
– Government and military secrets
– Intellectual property
– Personal communications

If you’re encrypting data today with RSA or ECC that needs to stay private for 10+ years, you’re already too late. Adversaries have incentive to capture everything now and wait.

“The deadline to migrate is effectively already here,” as security researchers put it. The question isn’t when quantum computers arrive; it’s whether your current data will still matter when they do.

Post-Quantum Cryptography: The Solution

The good news: cryptographers have been preparing for this moment for years. The solution is post-quantum cryptography (PQC)—encryption algorithms designed to be secure against both classical and quantum attacks.

What Makes PQC Different?

Post-quantum algorithms rely on mathematical problems that even quantum computers can’t solve efficiently:

Lattice-based cryptography: Based on the difficulty of finding the shortest vector in a high-dimensional lattice. Think of it as finding a specific point in an n-dimensional grid where n is very large. ML-KEM and ML-DSA (more on these below) use this approach.

Hash-based signatures: Using cryptographic hash functions (like SHA-2) as the foundation. These have been studied for decades and are considered highly secure. SLH-DSA uses this approach.

Code-based cryptography: Based on the difficulty of decoding error-correcting codes. The McEliece system (a candidate algorithm) has resisted attacks since 1978.

Multivariate cryptography: Based on solving systems of multivariate polynomial equations—hard even for quantum computers.

Isogeny-based cryptography: Based on finding paths between elliptic curves (though some isogeny schemes have been broken, highlighting the need for rigorous analysis).

NIST Standards: The New Framework

In August 2024, the U.S. National Institute of Standards and Technology (NIST) released the first three finalized post-quantum encryption standards—the result of an eight-year global competition to select quantum-resistant algorithms.

Here are the standards:

FIPS 203 – ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism)
– Formerly known as CRYSTALS-Kyber
– Primary standard for general encryption and key exchange
– Designed to replace key agreement protocols (like ECDH)
– Advantages: Small key sizes, fast operations, efficient implementation
– Use cases: TLS/HTTPS key exchange, VPN connections, encrypted messaging

FIPS 204 – ML-DSA (Module-Lattice-Based Digital Signature Algorithm)
– Formerly known as CRYSTALS-Dilithium
– Primary standard for digital signatures
– Designed to replace RSA and ECDSA signatures
– Advantages: Good performance, reasonable signature sizes, well-analyzed security
– Use cases: Code signing, certificate authorities, document signing, blockchain

FIPS 205 – SLH-DSA (Stateless Hash-Based Digital Signature Algorithm)
– Formerly known as SPHINCS+
– Alternative signature standard using hash functions
– Intended as a backup in case lattice-based methods prove vulnerable
– Advantages: Based on well-understood hash functions, minimal attack surface
– Trade-off: Larger signatures, slower than ML-DSA

A fourth standard (FIPS 206, based on FALCON) is in development, to be named FN-DSA.

Why multiple standards? Defense in depth. If one mathematical approach proves vulnerable to a future discovery, we need alternatives. Having backup algorithms with different mathematical foundations ensures we’re not putting all eggs in one basket.

Status and Adoption

These standards are finalized and ready for implementation as of August 2024. Major technology companies are already integrating them:

• Cloudflare has deployed post-quantum TLS in production
• Google and Mozilla have enabled PQC in their browsers
• Major cloud providers (AWS, Azure, GCP) are implementing PQC options
• Open-source libraries (OpenSSL, BoringSSL) are adding support

The standards are ready. The implementation race has begun.

Preparing for the Quantum Era: What Organizations Should Do

If you’re responsible for security in any organization, here’s your roadmap. The transition to post-quantum cryptography isn’t a simple upgrade—it’s a multi-year transformation that requires planning.

1. Inventory Your Cryptographic Assets (Start Here)

You can’t protect what you don’t know about. Most organizations have cryptographic dependencies scattered across:

• Applications: Custom software using RSA/ECC for encryption, signatures, or key exchange
• Certificates: TLS certificates, code-signing certificates, client authentication certificates
• Protocols: VPNs, SSH keys, S/MIME for email
• Third-party systems: Vendor software, SaaS platforms, cloud services
• Hardware: Hardware security modules (HSMs), smart cards, embedded devices
• Archived data: Encrypted backups, stored documents that still need confidentiality

Create a comprehensive inventory: where is RSA/ECC used, what for, and what data does it protect?

2. Prioritize Based on Risk

Not all cryptographic usage is equally urgent. Prioritize based on:

• Data sensitivity: What would happen if this data leaked in 10-15 years?
• Data longevity: How long must this data stay confidential?
• Exposure: Is this data transmitted over networks where adversaries could capture it?
• Criticality: How essential is this system to operations?

High priority: Systems protecting long-lived, sensitive data that’s transmitted over networks (VPN connections, TLS certificates for web applications).

Medium priority: Internal systems, digital signatures where data has short confidentiality requirements.

Lower priority: Systems that can be upgraded quickly, data that doesn’t require long-term confidentiality.

3. Build Crypto-Agility

Crypto-agility is the ability to quickly replace cryptographic algorithms without major system redesigns. It’s essential because:

• We may discover vulnerabilities in current PQC algorithms
• Standards will evolve (NIST has more algorithms in the pipeline)
• Regulatory requirements will change

Practical steps:
– Abstract cryptographic operations behind interfaces (don’t hard-code algorithm choices)
– Use libraries that support algorithm negotiation (like TLS 1.3 with hybrid key exchange)
– Design systems to handle larger key sizes (PQC keys are often larger)
– Plan for certificate renewal and rotation processes

4. Test and Pilot

Before replacing production systems, test PQC implementations:

• Set up post-quantum TLS in test environments
• Benchmark performance (PQC has different computational characteristics)
• Test compatibility with existing systems
• Validate that key sizes and signatures don’t break protocols

5. Procurement and Vendor Management

Your vendors need to be quantum-ready too. In procurement and contracts:

• Require PQC readiness in new technology purchases
• Ask vendors about their post-quantum roadmap
• Include cryptographic flexibility in requirements
• Verify third-party library and service support for NIST PQC standards

6. Monitor Regulatory Requirements

Governments are setting timelines:

NIST IR 8547 (November 2024 draft):
– RSA-2048 and ECC P-256 deprecated after 2030 (discouraged for new use)
– Disallowed after 2035 (must be replaced)

NSA CNSA 2.0:
– National security systems must use PQC by 2032

European Union:
– Critical infrastructure expected to transition high-risk use cases by end of 2030

If you operate in regulated industries or handle government data, compliance deadlines are coming.

7. Timeline Reality Check

Large enterprises typically need 12-15 years to complete cryptographic migrations. It sounds like a long time, but:

• Inventorying assets across a large organization: 1-2 years
• Testing and piloting: 1-2 years
• Updating systems in production: 3-5 years
• Replacing legacy and embedded systems: 5+ years (some hardware can’t be upgraded)

If you start in 2026, you might finish by 2040. That’s cutting it close. Starting now gives you buffer for unexpected challenges.

A Realistic Timeline for the Quantum Threat

Let’s put everything together in a realistic timeline:

Key insight: The 2030-2035 window is when everything needs to be migrated, but preparation should start now because migration takes years.

Frequently Asked Questions

Will quantum computers break all encryption?

No. Quantum computers specifically break public-key cryptography (RSA, ECC, Diffie-Hellman) using Shor’s algorithm.

Symmetric encryption (like AES) and hash functions (like SHA-256) face a different threat: Grover’s algorithm gives a quadratic speedup. This sounds scary, but it just means doubling key sizes helps. AES-256 reduced to AES-128 security by quantum computers is still secure—just use longer keys.

The real danger is to public-key systems, which can’t be “fixed” by using longer keys.

Is my data already compromised?

If your data was transmitted over the internet or stored in encrypted form accessible to adversaries, and it was protected only by RSA or ECC, and it still needs to remain confidential for 10-15 years… then yes, it’s at risk.

The good news: Now is the time to start transitioning so that future data is quantum-safe.

Should I panic?

No. Panic doesn’t help. Preparation does. The cryptographic community has been working on this for over a decade, standards exist, and the path forward is clear.

What you should feel is urgency. Not for today’s breaches, but for tomorrow’s vulnerabilities. The organizations that start preparing now will be fine. Those that wait may face a scramble.

Is post-quantum cryptography proven safe?

Nothing in cryptography is ever “proven” secure—we only have algorithms that have resisted the best attacks for a long time.

NIST’s selected algorithms have undergone years of public analysis by cryptographers worldwide. They use mathematical problems that have been studied for decades. While we can’t guarantee they’ll never be broken, they’re the best options available, and they represent the combined wisdom of the global cryptographic community.

Using them is significantly safer than using RSA and ECC, which we know will be broken.

The Bottom Line

Quantum computing represents a fundamental shift in the threat landscape for cybersecurity. The algorithms protecting most sensitive communications today—RSA and ECC—will become vulnerable within the next decade or two.

But here’s the hopeful message: We have solutions. NIST has finalized post-quantum cryptography standards. Major technology companies are implementing them. The path forward is clear.

What’s needed now is awareness and action:

1. Understand that “harvest now, decrypt later” makes this a present threat, not a future one
2. Inventory where your organization uses quantum-vulnerable cryptography
3. Prioritize systems protecting long-lived, sensitive data
4. Plan for a multi-year migration to quantum-resistant algorithms
5. Act now—because the deadline for data captured today is already set

The quantum era isn’t coming. It’s here. The question is whether you’ll be ready.

Want to learn more about protecting your organization’s data in the quantum era? Stay tuned to Ace Fortis for practical guidance on implementing post-quantum cryptography and building quantum-safe security programs.

Keywords: quantum computing, post-quantum cryptography, quantum encryption, quantum threats, quantum-safe security

Category: Cybersecurity

Word Count: ~2,850 words