Post-Quantum Cryptography: Q-Day Before 2030?

研报英文原文证据摘录

Post-Quantum Cryptography: Q-Day Before 2030?

May 11, 2026 Post-Quantum Cryptography: Q-Day Before

2030?

Jesse Sobelson, CFASTRATEGIC (332) 400-5050 jsobelson@btig.com WHAT YOU SHOULD KNOW: Q-Day, or the moment a quantum computer can break

RSA-2048 encryption, has seen its estimated arrival accelerate from the mid-2030s to

2028-2029 in the span of the last 18 months. Two papers published in March 2026 cut

the physical qubit requirement down from 1 million to as low as 10,000. IonQ (IONQ,

Not Rated) on its 1Q26 call even noted it could see its technology capable of supporting

software that breaks RSA-2048 encryption as soon as 2028. While many industries are

actively adopting PQC standards today, we find BTC and ETH notably lag on this front.

In this industry report we outline what quantum computing means for encryption,

explain what threats are imminent and material (and what's not), and highlight howOPPORTUNITIES we see companies spending to defend themselves.

■ Q-Day timeline collapsed five orders of magnitude in 13 years, with most of

the move in the last 18 months. From 1 billion physical qubits estimated in 2012

to as few as 10,000 neutral atom qubits estimated in March 2026, the compute

requirements continue to decline. Industry roadmaps points to hardware readiness

sometime in 2028-2029.INDUSTRY

■ Quantum threat is surgical; not total. Shor's algorithm specifically breaks RSA

and ECC-based encryption (the asymmetrical handshake layer behind every HTTPS,

banking app, and VPN); AES and SHA can "survive" based on current estimations,

but larger encryption methodologies should be used. This means the true quantumREPORT threat is to the 1% of cryptographic work that does key exchange and digital

signatures, but that 1% gates all other communication.