Quantum factoring and discrete-logarithm algorithm that would break RSA and ECC given sufficient fault-tolerant hardware.
Justin Sun says Tron is ready to bring quantum resistance to mainnet at any time, now that post-quantum signatures run on its Nile testnet. Mainnet still needs separate governance approval, Crypto Briefing reported, and the opt-in design reaches only holders who adopt it.
Reality
NSA has moved its post-quantum deadline for National Security Systems to 2027, two years ahead of Cloudflare, Google and Microsoft, a dev.to post reports. That account is secondhand, so whether suppliers to those systems have to re-plan their migrations depends on what the agency's own statement says.
Reality
UC San Diego and INRIA researchers forged RSA signatures on a 1,024-bit key inside a hardware security module after about 4 billion signing requests. The key stayed inside the device throughout, so for custodians the exposure is in signing settings, starting with the FIPS mode the researchers switched off.
Reality
The construction runs inside today's Script limits, so no soft fork was needed. The cost of quantum defence moves instead onto the individual holder, at $75 to $150 per transaction.
Perspective Coverage
4 publishersReality
Google said faster progress in quantum hardware and error correction moved its migration to 2029. A Caltech, Berkeley and Oratomic paper published the same month put the qubits needed for Shor's algorithm as low as 10,000.
Reality
Eigen Labs' ECDSA.Fail leaderboard took the resource score for one step of a quantum key recovery from 10.75 billion to 1.496 billion by July 26, while the defense side works to fixed dates in 2029 and 2030.
Reality
Post-quantum standards were finalised in August 2024, and NIST means to phase out most quantum-vulnerable algorithms by 2035. For banks the harder problem is finding every place RSA and ECC are written into application code.
Reality
Three regulators have now dated the migration away from today's encryption, and the nearest date belongs to FINMA, which wants supervised institutions to get a post-quantum strategy through the board by mid-2027.
Reality
The algorithm-level numbers are the part of the estimate that can be recompiled onto any fault-tolerant machine, and the headline 25.7 days on 19,397 physical qubits belongs to the trapped-ion architecture its own authors proposed.
Reality
IonQ's September 8 paper puts one secp256k1 key at just under 26 days on 20,000 physical qubits. The company's roadmap reaches 10,000 fault-tolerant qubits in 2027 and names no year for the larger machine.
Reality
Superion 256 opens for orders with deliveries due in 2027. The six tapeouts IonQ ran in half a year say more about whether its 2028 fault-tolerance date is real than the qubit count does.
Reality
The 26-day figure is a runtime rather than a date, and it works out to one logical Toffoli every 57.6 milliseconds on trapped-ion hardware whose scale IonQ's roadmap does not reach until 2028. No error rates are published to check it.
Reality
Gizmodo reports that a StarkWare researcher's transaction needed no soft fork. That fact moves post-quantum migration out of the developer debate and into the custody workflow, where somebody has to schedule it and pay for it.
Reality
InfoQ's Spring Boot walkthrough puts ML-KEM and ML-DSA behind the standard JCE on JDK 24. That retires the library argument and leaves the migration gated on where a private key lives and how long your service tokens do.
Reality
IBM has closed the HRL Laboratories deal behind a 2029 fault-tolerant target. For anyone holding ciphertext that must outlive the decade, the vendor's date is now the planning date.
Reality
Hardcoded algorithms and forced TLS 1.2 across 90-plus repositories stop OpenStack inheriting post-quantum crypto the platform already ships. Keystone's token signing is one hardcoded line.
Reality
A contributor's draft would make the validator deposit contract variable length and add a mode to end BLS signatures permanently. It is unfinished, unnumbered, and aimed at a 2029 target that may move.
Reality
A Forbes Tech Council argument for urgency leans on benchmarks that were never factoring runs. The part of it that survives scrutiny is still enough to justify the spend.
Reality