Forward or Backwards

Topics › Computers › Quantum Computers

The Race to Encrypt Before Quantum Computers Break Everything

Published · 19 min

Watch on YouTube

Data encrypted today, right now, can be intercepted and stored - not broken, just kept - until a computer capable of breaking it exists. That strategy has a name, 'harvest now, decrypt later', and it is why the migration to quantum-safe encryption is already running flat out, years before anyone has built a quantum computer that can actually do the breaking.

The video explains why today's public-key encryption (RSA, Diffie-Hellman, elliptic-curve cryptography) depends on factoring and discrete logarithms being too slow for an ordinary computer; how Peter Shor's 1994 algorithm, developed at Bell Labs, proved a quantum computer could do both quickly; and how far real quantum hardware - including Google's Willow chip (9 Dec 2024) - actually is from the roughly one million noisy qubits a 2025 Google estimate says breaking RSA-2048 would need.

Then post-quantum cryptography itself: lattice-based and hash-based mathematics that runs on ordinary computers, not quantum ones, and NIST's standards - FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA), finalised 13 August 2024, plus HQC, selected as a backup algorithm on 11 March 2025. The video also separates PQC from quantum key distribution (QKD), using Romania's RoNaQCI network (announced 27 February 2026) and Malta's live PRISM link (May 2026) to show the difference between QKD's specialised fibre hardware and PQC's ordinary software.

The policy side: the NSA's Commercial National Security Algorithm Suite 2.0 (announced September 2022) and Executive Order 14412, signed 22 June 2026, which set US federal deadlines of 2030 and 2031; the European Commission's June 2025 roadmap; and Tsinghua University cryptographer Wang Xiaoyun's March 2026 remarks on China's own, disputed technical approach.

Finally, what migration actually requires beyond a browser update, the genuine disagreements over key size, algorithm maturity and timeline that remain unresolved, and what any of this means for governments, large organisations and individuals - general information, not personal advice.

Every figure is on screen with its source and date.

In these topics

Chapters

  1. The clock is already running
  2. Why RSA and Diffie-Hellman work at all
  3. Shor's algorithm breaks the assumption
  4. How close are quantum computers really
  5. Post-quantum cryptography: new math, not new physics
  6. The NIST algorithms arrive
  7. PQC vs quantum key distribution
  8. The US pushes CNSA 2.0
  9. Europe and China race on their own tracks
  10. What migration actually looks like
  11. What's still unresolved
  12. What to actually do about it

More from Forward or Backwards on YouTube

Sources and credits

Photo credits (Wikimedia Commons)

Primary sources

  • P. Shor, 'Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer', SIAM Journal on Computing, 1997 (first presented 1994, 35th IEEE FOCS).
  • NIST, 'NIST Releases First 3 Finalized Post-Quantum Encryption Standards', nist.gov, 13 Aug 2024.
  • NIST, 'NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption', nist.gov, 11 Mar 2025.
  • Google Research, 'Meet Willow, our state-of-the-art quantum chip', blog.google, 9 Dec 2024.
  • C. Gidney (Google Quantum AI), 'How to factor 2048 bit RSA integers with less than a million noisy qubits', arXiv preprint, 2025 - A PREPRINT.
  • NSA, 'Announcing the Commercial National Security Algorithm Suite 2.0', Cybersecurity Advisory, Sept 2022.
  • The White House, Executive Order 14412, 'Securing the Nation Against Advanced Cryptographic Attacks', signed 22 Jun 2026; Federal Register, 25 Jun 2026 (91 FR 38483).
  • European Commission, 'Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography', June 2025.
  • Reuters, interview with Wang Xiaoyun (Tsinghua University), as reported by thequantuminsider.com and malaymail.com, 19 Mar 2026.
  • IonQ, press release on the RoNaQCI quantum key distribution network, and thequantuminsider.com coverage, 27 Feb 2026.
  • telecomtv.com and quantumcomputingreport.com, coverage of Terra Quantum / Merqury Cybersecurity's PRISM quantum key distribution link in Malta, May 2026.

Not regulated financial advice.