Quantum Computing's Trillion-Dollar Promise Conceals Critical Dangers

Quantum computing presents a transformative potential alongside formidable risks. Tech giants such as IBM, Google, Microsoft, and Amazon have launched commercial quantum cloud services, while specialized companies like Quantinuum and PsiQuantum rapidly achieved unicorn valuations. Analysts project the global quantum computing market could contribute over $1 trillion to the global economy from 2025 to 2035. Yet, a critical question remains: do the benefits definitively outweigh the dangers?

On one hand, these advanced systems could revolutionize fields including pharmaceutical research, climate science, artificial intelligence, and the pursuit of artificial general intelligence (AGI). Conversely, they introduce profound cybersecurity challenges that demand immediate attention, even though cryptographically-relevant quantum computers capable of breaking today's encryption are still years from realization.

Understanding the Quantum Computing Threat Landscape

The principal cybersecurity concern surrounding quantum computing is its ability to crack encryption algorithms currently considered unbreakable. A KPMG survey indicates approximately 78% of U.S. companies and 60% of Canadian firms anticipate quantum computers will become mainstream by 2030. More alarmingly, 73% of U.S. respondents and 60% of Canadian respondents believe it's only a matter of time before cybercriminals leverage quantum computing to compromise contemporary security protocols.

Modern encryption relies on mathematical problems that are practically unsolvable by classical computers within a feasible timeframe. For example, factoring the large prime numbers used in RSA encryption would take a classical computer an estimated 300 trillion years. However, using Shor's algorithm—developed in 1994 to enable quantum computers to factor large integers efficiently—a sufficiently powerful quantum computer could solve this problem exponentially faster.

Grover's algorithm, designed for unstructured search, presents a significant challenge to symmetric encryption by effectively halving its security strength. This means AES-128 encryption would offer security comparable to a classical 64-bit system, rendering it vulnerable to quantum attacks. This underscores the urgent need to transition toward more robust standards like AES-256, which can better withstand near-future quantum threats.

Harvest Now, Decrypt Later

The "harvest now, decrypt later" (HNDL) attack strategy is particularly concerning. This approach involves adversaries collecting encrypted data today to decrypt it once quantum technology matures. It poses a severe long-term risk to sensitive data with enduring value, such as medical records, financial information, classified government documents, and military intelligence.

Given the potentially catastrophic impact of HNDL attacks, organizations worldwide managing critical infrastructure must embrace "crypto-agility"—the capacity to swiftly replace cryptographic algorithms and implementations as new vulnerabilities emerge. This threat is acknowledged in the U.S. National Security Memorandum on Promoting U.S. Leadership in Quantum Computing While Mitigating Risk to Vulnerable Cryptographic Systems, which explicitly calls for proactive countermeasures.

The Threat Timeline

Predictions for the arrival of quantum threats vary widely among experts. A recent MITRE report, based on current trends in quantum volume (a key performance metric), suggests a quantum computer powerful enough to crack RSA-2048 encryption may not emerge until around 2055-2060.

Simultaneously, some experts are more optimistic. They argue that recent advances in quantum error correction and algorithm design could accelerate progress, potentially enabling quantum decryption capabilities as early as 2035. For instance, a late-2020 report by researchers Jaime Sevilla and Jess Riedel expressed 90% confidence that RSA-2048 could be factored before 2060.

While the precise timeline remains uncertain, consensus is clear: organizations must begin preparations immediately, regardless of when the quantum threat materializes.

Quantum Machine Learning – The Ultimate Black Box?

Beyond current crypto-agility concerns, security researchers and futurists worry about the inevitable convergence of AI and quantum systems. Quantum technology could supercharge AI development by performing complex calculations at unprecedented speeds, potentially accelerating progress toward AGI. However, this synergy also creates scenarios with unpredictable outcomes.

The core issue is understandable even without AGI. Integrating quantum computing into machine learning could create the "ultimate black box" problem. Deep neural networks are already notoriously opaque, with decision-making processes that are difficult to interpret. While tools exist to explain classical neural networks, quantum machine learning would operate on fundamentally different principles.

The challenge stems from quantum computing's use of superposition, entanglement, and interference to process information in ways with no classical equivalent. When applied to ML algorithms, the resulting models may involve processes virtually impossible to translate into human-understandable reasoning. This poses significant concerns for high-stakes domains like healthcare, finance, and autonomous systems, where understanding AI decisions is essential for safety and regulatory compliance.

Will Post-Quantum Cryptography Be Enough?

To address rising quantum threats, the U.S. National Institute of Standards and Technology (NIST) launched its Post-Quantum Cryptography Standardization project in 2016. After a comprehensive review of 69 candidate algorithms from global cryptographers, NIST selected several promising methods based on structured lattices and hash functions—mathematical problems believed resistant to both classical and quantum attacks.

In 2024, NIST released detailed post-quantum cryptographic standards, prompting major tech firms to implement early protections. For example, Apple introduced PQ3, a post-quantum protocol for iMessage, to guard against advanced quantum attacks. Similarly, Google has been testing post-quantum algorithms in Chrome since 2016 and is progressively integrating them across its services.

Meanwhile, Microsoft is advancing qubit error correction techniques without disturbing the quantum environment, a significant leap toward reliable quantum computing. The company recently announced creating a "new state of matter" called a "topological qubit," which could accelerate the development of fully functional quantum computers.

Key Transition Challenges

Nevertheless, the migration to post-quantum cryptography involves substantial hurdles:

• Implementation Timeframe: U.S. officials estimate a 10-15 year rollout for new cryptographic standards across all systems, particularly challenging for hardware in remote locations like satellites, vehicles, and ATMs.
• Performance Impact: Post-quantum encryption typically requires larger key sizes and more complex operations, potentially slowing encryption and decryption processes.
• Technical Expertise Shortage: Successful integration demands IT professionals skilled in both classical and quantum cryptography.
• Vulnerability Discovery: Even promising post-quantum algorithms may contain hidden weaknesses, as seen with the NIST-selected CRYSTALS-Kyber algorithm.
• Supply Chain Concerns: Critical quantum components like cryocoolers and specialized lasers face risks from geopolitical tensions and supply disruptions.

Finally, technological savvy remains paramount in the quantum era. While companies adopt post-quantum cryptography, encryption alone cannot protect against human error—such as clicking malicious links, opening dubious attachments, or misusing data access. A recent Microsoft incident involved two applications inadvertently exposing private encryption keys, demonstrating how implementation errors can undermine theoretically sound protection.

Preparing for the Quantum Future

Organizations should take several key steps to prepare for quantum security threats:

• Conduct a Cryptographic Inventory: Catalog all systems using encryption that may be vulnerable to quantum attacks.
• Assess Data Lifetime Value: Identify information requiring long-term protection and prioritize system upgrades accordingly.
• Develop Migration Timelines: Establish realistic schedules for transitioning all systems to post-quantum cryptography.
• Allocate Appropriate Resources: Budget for the significant costs associated with implementing quantum-resistant security measures.
• Enhance Monitoring Capabilities: Implement systems to detect potential HNDL attacks.

Michele Mosca's theorem provides a framework for quantum security planning: If X (the time data must remain secure) plus Y (the time required to upgrade cryptographic systems) exceeds Z (the time until quantum computers can break current encryption), organizations must act immediately.

Conclusion

We are entering a quantum computing era accompanied by serious cybersecurity challenges that demand prompt action, even amid uncertainty about their full manifestation. While cryptographically-relevant quantum computers may be decades away, the risks of inaction are too significant to ignore.

As Vivek Wadhwa of Foreign Policy starkly warns: "The world's failure to rein in AI—or rather, the crude technologies masquerading as such—should serve as a profound warning. An even more powerful emerging technology with potential to wreak havoc, especially combined with AI, is quantum computing."

To navigate this technological shift, organizations should begin implementing post-quantum cryptography, monitor adversarial quantum programs, and secure the quantum supply chain. Preparing now is essential—before quantum computers render our current security obsolete.

Julius Černiauskas is CEO at Oxylabs.