fnands an hour ago

*ends as soon as practical quantum computers, something which might never happen, exist.

The author mentions: > RSA-2048: ~4096 logical qubits, 20-30 million physical qubits > 256-bit ECC: ~2330 logical qubits, 12-15 million physical qubits

For reference, we are at ~100 physical qubits right now. There is a bit of nuance in the logical to physical correlation though.

Scepticism aside, the author does mention that it might be a while in the future, and it is probably smart to start switching to quantum resistant cryptography for long-running, critical systems, but I'm not a huge fan of the fear-mongering tone.

  • brohee 3 minutes ago

    And no clear quantum Moore law emerging for the yearly increase in qbits (https://arxiv.org/abs/2303.15547)... The quantum panic pushes people to deploy immature solutions, and the remedy sure sometimes looks worse than the illness...

  • nottorp an hour ago

    You mean it will come right when AGI comes?