Get access to our live events, papers and training
Join the Tuesday 3pm CET peer reviews
Request our membership pack
Join the Tuesday 3pm CET peer reviews
PROFESSIONAL NETWORK
Join the World's Largest Community of Quantum Security Professionals
QSECDEF brings together the practitioners, policymakers, and vendors actively shaping the post-quantum transition. Members share early intelligence on tooling, procurement developments, and regulatory shifts before that information reaches the public domain. This is the professional network the field converges on.
More than 1,200 members from 40+ countries, including Five Eyes governments, NATO member institutions, and the leading quantum vendors are already part of the community.
EVENT INVITATIONS
Get Early Invitations to Quantum Security Events and Webinars
QSECDEF hosts closed briefings, practitioner webinars, and in-person events attended by defence agencies, central banks, and critical infrastructure teams. Members receive invitations before public registration opens. Several events are members-only and never open to the public.
600+ organisations across 40+ countries are represented in our member community, including defence ministries, NATO institutions, and Five Eyes government agencies.
THREAT INTELLIGENCE
The Briefing That Closes Your Quantum Threat Picture
Most organisations have a PQC roadmap. Fewer have a reliable signal on where the actual threat timeline sits, which vendors' claims hold up under scrutiny, and what peer organisations at your maturity level are doing. QSECDEF membership exists to close that gap. One briefing cycle has changed procurement decisions at organisations you would recognise.
Members include CISOs, heads of cryptography, and national security advisors from 40+ countries. The Five Eyes and NATO institutions read what we publish.
1,200+MEMBERS
40+COUNTRIES
600+ORGANISATIONS
Check your email and junk email for information and add us to your safe senders list.
What Is a Logical Qubit and Why It Changes the Q-Day Timeline Calculation
Hardware announcements in quantum computing follow a reliable pattern: a large headline number, a spectacular benchmark, and a wave of coverage about what it means for encryption. The coverage rarely explains the one piece of information that would let a security professional make a sensible risk judgement: the difference between a physical qubit and a logical qubit.
What Is a Logical Qubit and Why It Changes the Q-Day Timeline Calculation
Hardware announcements in quantum computing follow a reliable pattern: a large headline number, a spectacular benchmark, and a wave of coverage about what it means for encryption. The coverage rarely explains the one piece of information that would let a security professional make a sensible risk judgement: the difference between a physical qubit and a logical qubit.
That gap is not trivial. It is, in practical terms, a factor of roughly 1,000. Understanding it is the minimum requirement for reading a quantum hardware announcement and not being misled by it.
Physical Qubits and Logical Qubits: The Distinction That Matters
A physical qubit is the basic hardware unit of a quantum processor. In superconducting systems, the dominant commercial architecture, it is a Josephson junction operating at millikelvin temperatures, exhibiting quantum mechanical behaviour within a carefully controlled electromagnetic environment. Physical qubits are fundamentally noisy: they decohere, losing their quantum state through thermal fluctuations and electromagnetic interference. Current superconducting hardware operates with two-qubit gate error rates in the range of 10-3 to 10-2, between one error per hundred and one per thousand gate operations [VERIFIED: Krantz et al., Applied Physics Reviews 6, 021318 (2019)].
A logical qubit is different in kind, not just scale. It is a fault-tolerant quantum information unit built from multiple physical qubits using a quantum error-correcting code. The purpose is to encode quantum information in a way that errors on individual physical qubits can be detected and corrected, maintaining the logical state with arbitrarily low error rate, provided the physical error rate stays below the code's threshold. The logical qubit is the computational unit that Shor's algorithm actually requires. A processor with N physical qubits does not have N logical qubits available for cryptographically relevant computation.
The surface code, currently the most practically viable quantum error-correcting code for superconducting hardware, has a fault-tolerance threshold of approximately 1% (10-2) [VERIFIED: Fowler et al., Physical Review A 86, 032324 (2012)]. IBM, Google, and other manufacturers target physical two-qubit gate error rates below 0.1% (10-3) as their operating target. That is below the surface code threshold, which means fault-tolerant operation is physically possible on current-generation hardware. Possible is not the same as achieved at the scale needed to threaten encryption.
The threshold theorem guarantees that below the code threshold, adding more physical qubits to a logical qubit improves the logical error rate exponentially. Above it, scaling makes things worse. This is why getting physical error rates below 1% is a necessary condition for the entire fault-tolerant architecture to work [VERIFIED: Dennis et al., Journal of Mathematical Physics 43, 4452 (2002)].
The 1,000:1 Overhead: How We Get from Physical to Logical
The surface code achieves its error correction by arranging physical qubits in a two-dimensional grid, with data qubits interspersed with ancilla qubits that perform syndrome measurements. The number of physical qubits required per logical qubit depends on the code distance, d: the minimum number of physical errors that would cause an undetectable logical error. The physical qubit count per logical qubit is approximately 2d2.
To run Shor's algorithm against RSA-2048 with a tolerable accumulated error rate, the required logical error rate per gate is approximately 10-10. Achieving that at a physical error rate of 10-3 requires a code distance of approximately d = 27. That gives 2d2 − 1 = 1,457 physical qubits per logical qubit [VERIFIED: Fowler et al. 2012, Table I]. Rounded to the order of magnitude used in planning: approximately 1,000 physical qubits per logical qubit.
Gidney and Ekerå (2021) calculated that factoring a 2048-bit RSA integer with an optimised surface code implementation requires approximately 20 million physical qubits, running for approximately 8 hours on a fault-tolerant quantum computer [VERIFIED: Gidney and Ekerå, Quantum 5, 433 (2021)]. This is the peer-reviewed resource estimate that NIST and NSA use in their migration planning. It is not a theoretical upper bound. It is an optimised lower-bound estimate: the minimum credible physical resource requirement assuming best-case implementation at the physical error rates that current hardware targets.
Current hardware is nowhere close. IBM Heron r2 has 156 physical qubits. Google Willow (December 2024) has 105 physical qubits. IBM Condor (2023) has 1,121 physical qubits, the highest public physical qubit count as of the time of writing. Against the 20 million qubit Gidney-Ekerå threshold, that is a factor of approximately 18,000 below the minimum requirement for cryptographic relevance. The 1,000:1 ratio makes the comparison concrete: IBM Condor's 1,121 physical qubits fall short of the approximately 1,458 required for a single d=27 logical qubit in a surface code architecture.
How to Read a Hardware Announcement Without Being Misled
The translation rule is simple. When you read a headline that says "N-qubit processor," divide N by approximately 1,000 to get a rough estimate of the logical qubit count available for fault-tolerant computation at current error rates. A 1,000-qubit processor represents approximately one logical qubit. A 10,000-qubit processor represents approximately ten. The CRQC threshold is approximately 20,000 logical qubits.
Hardware marketing measures physical qubits, quantum volume, CLOPS, and circuit fidelity benchmarks. None of those metrics directly measures cryptographic threat capability. A CISO reading these numbers needs the translation, not the headline.
The Google Willow announcement of December 2024 illustrates the confusion well. Willow solved a random circuit sampling benchmark in under five minutes that would, by Google's estimation, take a classical supercomputer 1025 years to replicate [VERIFIED: Acharya et al., Nature 634, 648–652 (2024)]. That is a genuine and important scientific result. It is not a cryptographic threat. The random circuit sampling task is specifically designed to be hard for classical simulators; it has no structural relationship to Shor's algorithm or any known cryptanalytic problem. Willow has 105 physical qubits. It is not capable of running Shor's algorithm on cryptographically relevant key sizes, nor is any currently announced system.
The more significant finding in the Willow paper is subtler: as Willow increased its code distance from d = 3 to d = 5 to d = 7, the logical error rate decreased exponentially. That is exactly what the surface code theory predicts for operation below the fault-tolerance threshold. It is the first time a commercial processor has demonstrated this behaviour at scale. It confirms that the surface code architecture works in practice. It does not compress the timeline to CRQC capability. It validates the engineering direction.
Q-Day: The 2033-2035 Range and Why It Exists
Q-Day is the informal term for the first moment at which a cryptographically relevant quantum computer (CRQC) exists, capable of running Shor's algorithm against RSA-2048 or ECDSA P-256 within hours to days. The Gidney-Ekerå 20 million physical qubit estimate is the technical anchor. Translating to logical qubits: at 1,000:1 overhead, that is approximately 20,000 logical qubits operating with the specific gate sequence and magic state distillation required for Shor's algorithm.
The 2033-2035 window used in QSECDEF's risk planning is a probabilistic estimate derived from published scaling trajectories, error rate improvement trends, and the remaining engineering challenges. NIST IR 8547 (November 2024) provides the authoritative policy anchor: RSA and ECC are designated for deprecation before 2030 and disallowance after 2035 [VERIFIED: NIST IR 8547, Transitioning the Use of Cryptographic Algorithms and Key Lengths, November 2024]. The disallowance date of 2035 represents NIST's judgement that 2033-2035 is the credible earliest threat window. That is not a prediction. It is a risk planning horizon calibrated to give organisations enough runway to complete migration before the threat materialises.
The Mosca inequality translates the horizon into a decision rule. If a system must be protected for X more years, and migration takes Y years, and the probability of a CRQC within X + Y years is non-negligible, migration should begin now. A system that must remain protected until 2040 (X = 14 years from 2026) and whose migration takes 5 years (Y = 5) should be in active migration no later than 2031, on the assumption that the 2033-2035 window is credible. For data already collected and stored under HNDL (harvest-now-decrypt-later) attack methodology, the threat date is today, not 2033. Adversaries do not need a CRQC to harvest ciphertext. They need one only to decrypt it.
What It Would Take to Reach 20 Million Physical Qubits
Reaching 20 million physical qubits is not a single engineering problem. It is at least five independent ones, and progress on any one of them does not guarantee progress on the others.
Physical qubit count is four orders of magnitude from the current best hardware to the CRQC threshold. That scaling must be achieved while holding physical error rates at or below 10-3 per two-qubit gate. Maintaining error rates as the system scales is harder than achieving them on small processors: crosstalk between qubits, fabrication uniformity, and electromagnetic isolation become more difficult to control at scale [VERIFIED: Fowler et al. 2012 resource analysis; Martinis and Megrant on control electronics scaling challenges].
Classical control electronics for 20 million qubits require 20 million independent control channels. Current cryogenic electronics do not scale to this density at dilution refrigerator temperatures. Connectivity and routing in a surface code architecture require nearest-neighbour high-fidelity gates; maintaining that topology at 20 million qubit scale is an unsolved engineering problem.
Then there is magic state distillation. Shor's algorithm requires T gates, which cannot be implemented fault-tolerantly in the surface code without a resource-intensive subroutine that consumes physical qubits as ancilla. The Gidney-Ekerå 20 million qubit estimate includes the physical qubits allocated to magic state distillation factories, which represent a substantial fraction of the total budget [VERIFIED: Gidney and Ekerå 2021; Bravyi and Kitaev, Physical Review A 71, 022316 (2005)]. Any improvement in distillation efficiency reduces the total physical qubit requirement and potentially compresses the Q-Day timeline. This is an active research area and the primary source of downside uncertainty in the 2033-2035 estimate.
None of these challenges is a fundamental physical barrier. Each is an engineering problem of enormous difficulty. The distinction matters for planning: Q-Day is not physically impossible. It is engineeringly hard on a multi-year timeline.
What the 2024-2025 Advances Actually Mean for the Timeline
Google Willow's December 2024 result is worth being precise about. It demonstrated below-threshold fault-tolerant operation: the logical error rate decreased exponentially as code distance increased, through d = 3, 5, and 7 surface code implementations. That is the proof-of-principle that the surface code architecture operates as the theory predicts, on real hardware, below the threshold. It does not mean Willow can be scaled to 20 million qubits, or that the other four engineering problems have been solved [VERIFIED: Acharya et al. 2024, Table 1 and supplementary data].
Microsoft's topological qubit announcement of February 2025 claimed a fundamentally different approach: Majorana-based qubits with inherently lower error rates than superconducting alternatives. If the claimed performance characteristics are validated and reproduced at scale, topological qubits could achieve fault-tolerant operation with a lower physical-to-logical overhead than the 1,000:1 surface code reference. The claims remained under independent peer review at the time of writing [ASSUMED: verify current peer review status as of June 2026 before publication; this is a temporally anchored claim]. An approach that reduces the overhead ratio from 1,000:1 to, say, 100:1 would compress the physical qubit requirement for a CRQC by an order of magnitude and accelerate the credible Q-Day window.
The hardware roadmaps for 2026-2030 project further progress on physical qubit count and error rates. IBM's published roadmap targets fault-tolerant operation of logical qubits within a commercially usable quantum system by the late 2020s. For the hardware roadmap context, see the fault-tolerance roadmaps analysis.
The correct interpretation of all recent progress is: the engineering path is confirmed viable. The timeline remains 2033-2035 as the earliest credible window for the CRQC threat. The correct response to uncertainty about whether it will be 2033 or 2038 is to migrate before 2033 regardless. The organisations that begin in 2026 will finish in time. The ones that wait for certainty about the exact date will not.
Sources
Gidney, C. and Ekerå, M., "How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits," Quantum 5, 433 (2021). doi:10.22331/q-2021-04-15-433
Fowler, A.G. et al., "Surface codes: Towards practical large-scale quantum computation," Physical Review A 86, 032324 (2012). doi:10.1103/PhysRevA.86.032324
Acharya, R. et al. (Google), "Quantum error correction below the surface code threshold," Nature 634, 648–652 (2024). doi:10.1038/s41586-024-08219-8
Dennis, E. et al., "Topological quantum memory," Journal of Mathematical Physics 43, 4452 (2002). doi:10.1063/1.1499754
Krantz, P. et al., "A Quantum Engineer's Guide to Superconducting Qubits," Applied Physics Reviews 6, 021318 (2019). doi:10.1063/1.5089550
Bravyi, S. and Kitaev, A., "Universal quantum computation with ideal Clifford gates and noisy ancillas," Physical Review A 71, 022316 (2005). doi:10.1103/PhysRevA.71.022316
Identity infrastructure sits at the boundary of most enterprise security models. For IAM engineers and security architects, post-quantum migration of SAML assertions and OIDC tokens requires understanding where quantum vulnerability actually lives and what major identity providers support today.
The concern that post-quantum TLS will slow down HTTPS connections is widespread and, in most production environments, wrong. This analysis covers Cloudflare deployment data, Chrome GREASE findings, Apple PQ3 numbers, and the four variables that actually determine production impact.
Classical optical repeaters work by measuring the incoming signal and re-amplifying it. Measure, copy, transmit. This is precisely what quantum networks cannot do. The no-cloning theorem, proved by Wootters and Zurek in 1982, establishes that an unknown quantum state cannot be copied. Quantum repeaters solve this constraint through entanglement swapping — without ever measuring the quantum state being transmitted.
Leading Canadian provider of quantum-safe-by-design cryptographic infrastructure strengthens QSECDEF's mission to secure the transition into the Quantum-AI era.
Belden Inc., a global provider of network infrastructure solutions, has joined forces with Quantum Security & Defence to accelerate the adoption of quantum-secure standards across critical industries.
Israeli quantum computing startup Classiq has teamed up with NVIDIA and the BMW Group to optimise the architecture of electric vehicle mechatronic systems using quantum algorithms and GPU-accelerated simulation.
French quantum computing startup C12, a spin-off from the Physics Laboratory of the Ecole Normale Superieure in Paris, has closed an €18 million funding round to develop carbon nanotube-based universal quantum computers.
Dutch quantum technology company Qblox has closed a $26 million Series A round led by Quantonation and Invest-NL, funding the expansion of its modular, scalable quantum control stack technology.
So what would IBM a leading Quantum Computing company and French Quantum platform leader Pasqal, announce a plan to join forces, what IBM already has it's own Quantum computing platform?
The quantum world just got a lot more interesting. Quantinuum, the largest integrated quantum computing company globally, has introduced the industry’s first quantum computer boasting an impressive 56 trapped-ion qubits
The United States of America, in its most recent Entity List under the Export Administration Regulation (EAR), has added 37 quantum research organizations from China restricting them from gaining access to resources from the US. Of the 37 organizations, 22 are China’s top firms within the quantum te
A new chip called "Xiaohong" is the biggest quantum computing chip developed in China so far. It was developed by a team of scientists at the Center for Excellence in Quantum Information and Quantum Physics, part of the Chinese Academy of Sciences (CAS).
Quantum computing is an evolving field that has sparked a huge global interest due to its massive potential and capabilities. It remains one of the biggest frontiers of technology in the 21st century as governments, institutions, and private companies are all investing in the space and rightfully po
Aramco, a leading global integrated energy and chemicals company that creates value and economic benefits to people and communities worldwide by providing energy supply to them has partnered with Pasqal, a global leader in neutral atom quantum computing technology to deploy the first quantum compute
Finland via the Finnish Technical Resource Center (VTT) is working with CSC, operators of LUMI, a pan-European supercomputer located in CSC’s data center in Kajaani, Finland to develop quantum algorithm for future applications.
Pasqal, a leading quantum computing company that develops neutral atoms quantum processors in 2D and 3D arrays to bring the realisation of practical quantum computing applications in solving real-world
The Jülich Supercomputing Centre (JSC) at Forschungszentrum Jülich has partnered with Goethe-University Frankfurt, ParTec, and Quantum Machines to develop a 10+ superconducting qubit system and integrate it into their high-performance computing (HPC) infrastructure.
Amazon and IQM have joined forces to establish IQM’s quantum computing service on Amazon Web Service (AWS) via Amazon Braket, increasing the platform's usefulness. IQM is a global leader in the development of superconducting quantum computers, building…..
According to The Record, a White House top official, Anne Neuberger, the White House’s top cyber advisor, has reported that the National Institute for Standards and Technology (NIST) will release post-quantum or quantum-resistant cryptography algorithms in the coming weeks.
Automated guided vehicles (AGVs) are portable robots that follow along marked lines or wires on the floor or use radio waves, vision cameras, magnets, or lasers for navigation to transport heavy materials or items within industrial facilities.
Quantum computing is an evolving field that applies quantum mechanics to solve complex computational problems. These problems are deep numeric and systemic problems that are found in almost all areas of life. Consider communication, for example, its applications cut across fibre optics, point-to-poi
A new study published in the journal Science details how researchers from MIT brought two layers of ultracold magnetic atoms at 50 nanometers -the closest distance ever achieved- and its importance in the development of quantum technology
Quantum key distribution (QKD) is a secure communication process that involves the exchange of encryption keys between two particles within a quantum state in a safe and guaranteed environment. This can enable the encryption (securing) and description (revealing) of messages shared between those two
The potentials of quantum technology are enormous with applications spanning across healthcare, mobility, sensing, defence and military, aviation, computing, communications, technology, and so on. These and many more are industries that could be revolutionised by quantum technology once it achieves
IBM has been a world leader in the field of quantum technology for years and they have developed various solutions to prove their placement as an industry leader.
These companies have led the revolution of transforming supercomputers that solve computational problems sequentially using bits to quantum computers that have the potential to solve complex computational problems on multiple quantum states using qubits.
Where to study quantum technology in 2026: the ten leading research institutions for quantum computing, quantum information, quantum communications, and quantum sensing, with what each programme is known for.
Poznań Supercomputing and Networking Center (PSNC), ORCA Computing, and NVIDIA partner to accelerate the development of Hybrid Quantum Classical High-Performance Computing.
It has been rather fascinating to read the latest dispatch from the U.S. Department оf Energy, which has just announced an chunky infusion оf $7 million into five quantum tech firms under the Phase II Small Business Innovation Research (SBIR) and Small Business Technology Transfer (STTR)
The future holds immense promise for quantum technology across various fields, including cryptography and security, optimisation, drug discovery, machine learning…..
The electron’s spin is truly a perfect candidate for a quantum bit (qubit) – a basic unit of information in quantum computing. Many researchers are trying to find suitable qubits for specific applications. One of them is a research group led by Josep Orenstein at the Lawrence Berkeley National Labor
The Australian Government has announced that it will be investing in PsQuantum, a US company based in Palo Alto California. This investment is valued at 940M AUD (650M USD) and the structure will be a mixture of grant, equity, and loans - here is why…
Purdue University is bringing together leading researchers to collaborate with industry, government, and academia to develop chip-scale quantum systems to power the technology of the future
As quantum technology reaches its potential it has the likelihood of being able to crack the majority of existing security codes because of the way that such security systems are mathematically constructed - this is how its fixed
PsiQuantum has recently unveiled its latest advancements in quantum computing tools: the Quantum Resource Estimation Format (QREF) and the beta version of Bartiq, a Quantum Resource Estimator.
A network architecture by Photonics Inc and Zurich Instruments may help scale quantum networks around the globe and provides quantum algorithm services to solve complex computational problems.
The Universities of Melbourne and Manchester have collaborated to develop an ultra-pure Silicon chip for quantum computing. This breakthrough research could enhance the potential for the production of scalable and accurate quantum computers.
What is Quantum Computing? Quantum computing is the application of quantum mechanical theories in technology to solve complex problems (defined as problems with multi-dimensional variables) and have information stored as quantum bits or qubits.
Just a few weeks after announcing a €2.5M European Union grant, Paris based Welinq have formed a partnership with French Quantum Computer Hardware company Pasqal to interconnect quantum processors in an effort to address the current scalability issue of quantum computation. Welinq uses quantum memo
In the world оf computing, the juxtaposition оf analog and quantum paradigms opens a fascinating discourse оn the nature оf computation itself. Analog computers, relics оf computing history, are making a surprising comeback, interfacing with the cutting-edge realm оf quantum computing. Th
This article delves into the essence of quantum methodologies and frameworks, exploring their structure, operational mechanisms, potential applications, benefits, and the challenges they present.
Quantum optics, a field at the intersection of quantum physics and optical science, is driving a revolution in how we process, transmit, and manipulate information. By harnessing the quantum behaviors of light, this technology opens new frontiers in communication, computing, and sensing, presenting
PKI is the trust architecture underlying TLS, code signing, SSH, and most of enterprise security. RSA and ECDSA sign every link in the chain. Shor’s algorithm breaks both. Here is what that means and what replaces it.
The quantum threat to VPN security is present-tense: adversaries are capturing encrypted sessions now. This article explains which layer of a VPN tunnel is vulnerable, how ML-KEM addresses it, and which providers have shipped production post-quantum implementations.
At most enterprise security conferences in 2026, quantum computing and artificial intelligence share a stage. This article maps where the capabilities diverge, where they converge, and what the difference means for security architecture decisions.
A practitioner holding a CISSP, a CISM, and a GIAC GSEC in 2026 has credentials that satisfy most employer qualification frameworks. Put that same practitioner in charge of their organisation’s post-quantum cryptography migration programme and they will find that none of those credentials tells them how to select between ML-KEM-768 and ML-KEM-1024.
Four NIST standards were finalised in August 2024. They do not tell you which one to deploy first, which protocol represents the fastest migration path in your environment, or whether hybrid schemes are a destination or a waypoint. This is the practical decision framework for security architects in 2026.
The honest answer is that neither body offers what a quantum security professional actually needs. That is not a criticism. It is a statement of timing: NIST finalised ML-KEM, ML-DSA, SLH-DSA, and FN-DSA as standards in August and October 2024. Certification curricula operate on multi-year review cycles. What follows is a role-by-role assessment of which body's credentials serve quantum security professionals best given where the curricula actually are today.
The two terms are not interchangeable, and treating them as if they were produces real planning errors. NIST's Cryptography Resource Center uses post-quantum cryptography to mean classical algorithms running on standard hardware that resist quantum attacks. Quantum cryptography most commonly refers to quantum key distribution, which requires dedicated quantum optical hardware. They are fundamentally different migration paths.
In 1994, Peter Shor published a mathematical proof: on a quantum computer of sufficient size, integer factorisation and the discrete logarithm problem collapse from computationally infeasible to afternoon job. RSA security rests on the first problem. Every form of elliptic curve cryptography rests on the second. Both fall to the same core technique.
A quantum computer breaks the key exchange step of end-to-end encryption, not the bulk message cipher. The risk profile varies by application design. Signal and Apple iMessage have already shipped post-quantum key exchange. PGP email has not.
What a quantum security engineer actually does, what the role pays in 2026 in the US and UK, what skills matter at interview, and where the career leads. For the cybersecurity professional considering a pivot and the hiring manager writing the job description.
The news cycle treats quantum computing as either an existential emergency arriving next year or a distant curiosity with no current relevance. Both framings are wrong. What follows is an evidence-based answer to a precise question: when will a quantum computer become capable of breaking the encryption that protects internet communications, and what does that timeline mean for decisions you need to make now?
If you run a small business and someone has told you that quantum computers will soon break your encryption, the natural question is: does this actually affect me, and what do I need to do about it? The honest answer is more nuanced than either "nothing to worry about" or "you need an immediate security overhaul." The threat is real. For most small businesses, the response is measured and manageable.
No single qualification solves the quantum security problem in 2026. The certification market has not caught up to NIST’s post-quantum standards. Here is how to build the right combination, and in what order.
Zero Trust Architecture removes implicit network trust. Post-quantum cryptography migration removes algorithm vulnerability to a future quantum adversary. A ZTA deployed without PQC migration has cryptographic guarantees that expire in the 2033 to 2035 window, simultaneously across every pillar.
Google's Willow chip and IBM's Nighthawk processor are genuine scientific milestones. Neither changes the 2033-2035 Q-Day central estimate. Understanding why requires a short tour of what these announcements actually showed — and what they did not.
Available quantum security training clusters at opposite extremes: PhD-depth theory with no migration connection, or awareness briefings that explain Q-Day without equipping anyone to act. A rigorous practitioner curriculum sits between those positions. This article defines what it must contain.
There is no single EU quantum security regulation. There is instead a cluster of four general cybersecurity instruments whose requirements for cryptographic controls happen to include quantum vulnerabilities within their scope. This article maps what NIS2, DORA, the EU AI Act, and the Cyber Resilience Act each require in relation to quantum security.
Google's Willow chip in December 2024 confirmed below-threshold quantum error correction in hardware for the first time. Understanding what it demonstrated, and what it did not, is essential context for any Q-Day planning conversation. This article explains why error correction is the gating factor for Q-Day and what the Willow result changes.
Underwriter questionnaires are beginning to incorporate quantum security posture into risk assessment. This article maps what a credible answer looks like, and how DORA's ICT risk management framework shapes what an insurer expects to see from EU financial entities.
Less than the briefings suggest, but more than the sceptics acknowledge. This article works through the hardware landscape as it stands in 2026, assesses what published results mean when read carefully, and separates the engineering milestones that matter from the noise.
NIST published FIPS 203, 204, and 205 in August 2024. DORA entered full enforcement in January 2025. The regulatory infrastructure exists. The CPD infrastructure does not yet match it. This article maps the frameworks that do exist, identifies where quantum security competency sits within each, and sets out what a complete quantum security CPD record looks like in 2026.
Every security professional has read the headlines about national quantum programmes. What most enterprise security teams have not done is translate those headlines into a specific threat model for their organisation. This article does that translation, using official sources only, and draws a clear line between what the intelligence community has confirmed and what requires labelling as a planning assumption.
The IBM Nighthawk and Google Willow announcements attracted more executive-level attention than any quantum hardware development in years. Both results are genuine progress. Neither changes the 2033–2035 Q-Day central estimate that security planners rely on. This article compares four architecturally distinct approaches and frames progress against the metric that actually matters: fault-tolerant logical qubits.
Security teams at financial institutions, critical infrastructure operators, and defence contractors typically carry memberships with ISC(2), ISACA, or BCS. Those associations do important work. They also cannot serve as specialist quantum security communities, and in 2026 that distinction has started to matter in ways that are operationally concrete rather than theoretical.
Quantum security training is a buyer's market in the worst sense: provider marketing has converged on the same vocabulary regardless of actual quality. This article is a quality framework you can apply to any programme — verifiable from a curriculum document, a sample session, or a direct conversation with the programme team.
The standard reassurance that older data is encrypted and therefore protected does not hold against a CRQC running Shor's algorithm. This article explains why 2018-era TLS archives carry a specific and growing risk reaching its credible lower bound in 2030, and what risk management options remain for organisations that cannot re-encrypt historical archives.
The quantum threat does not map uniformly onto cryptography. Shor's algorithm breaks asymmetric cryptography completely. Grover's algorithm weakens symmetric cryptography. Those two outcomes require different responses on different timescales. This article explains the distinction and what it means for migration planning.
Critical national infrastructure is a different post-quantum problem. The data lifetimes are longer, the patching cycles are slower, and the disruption potential of a future decryption event is not a data breach notification. It is a power cut.
Every time you sign a contract digitally, download a software update, or visit a website over HTTPS, a digital signature is working in the background. The mathematics underpinning those signatures has a problem: a future quantum computer will be able to break it. NIST published its transition timeline in November 2024, and the clock is now running.
If you are evaluating hybrid post-quantum TLS deployment for production infrastructure, this article provides the numbers: CPU cycles, key sizes, bandwidth overhead per TLS handshake, real-world latency data from Cloudflare and Chrome deployments at scale, and the QUIC-specific constraints practitioners routinely underestimate.
Government security programmes increasingly encounter QKD in briefings and vendor pitches, often without a clear picture of where it has been deployed, what problems emerged, and why two leading government cybersecurity agencies have explicitly declined to endorse it. This article provides that picture.
Most post-quantum migration guidance directs organisations to ML-DSA for all signature needs. For firmware signing pipelines, long-lived code signing infrastructure, and document archiving with 50-year retention requirements, however, defaulting to ML-DSA without evaluating the alternatives leaves a technically superior option on the table. XMSS and LMS produce smaller signatures than ML-DSA-87 and carry the most conservative security assumption available in any deployed signature scheme today.
Writing about quantum threats to blockchain almost always starts at Layer 1: Shor's algorithm breaks secp256k1, Bitcoin and Ethereum wallet keys are at risk, the community needs to migrate. What it omits is where most on-chain economic activity actually runs today. Arbitrum and Optimism together process more transactions per day than Ethereum mainnet. These Layer 2 rollup systems sit on top of the ECDSA vulnerability, and they introduce a different and more complex PQC migration surface than Layer 1 alone.
Post-quantum VPN migration is not a single task. Enterprise VPN infrastructure spans three distinct protocol families, each with a different standardisation path, different integration mechanism for ML-KEM, and different maturity level in enterprise vendor implementations.
The terminology around quantum security has drifted badly enough that practitioners working from plausible-sounding assumptions are making procurement decisions, technical designs, and board presentations based on claims that do not hold up. Nine misconceptions, each with a concrete consequence when acted upon.
Most organisations do not have a cryptography problem. They have a hardcoded cryptography problem. The distinction matters because the solution to the first is algorithm replacement, and the solution to the second is architecture redesign. Post-quantum migration forces both, but the architectural work is what takes years and what the PQC literature consistently underweights.
Before 2021, most cyber insurance questionnaires asked whether you had a firewall and an incident response plan. Then ransomware losses climbed steeply enough to move underwriters. The same mechanism exists for post-quantum cryptography. Loss events have not occurred yet, but the architecture of how quantum risk enters the insurance market is visible now.
When Apple launched iMessage PQ3 in February 2024, coverage declared that iPhones were now quantum-safe. When Google deployed hybrid post-quantum TLS through Chrome, similar statements followed. Both claims require qualification. Post-quantum on mobile is not a single thing. It describes at least four distinct cryptographic layers on a device, each with a different migration status.
Signal, iMessage, and WhatsApp all made post-quantum announcements between 2023 and 2024. Each application addressed a specific cryptographic component. None of them addressed everything. Understanding what changed, what remains classically vulnerable, and why the distinction matters requires looking at the actual protocol mechanics rather than the press releases.
A structured analysis of the public evidence for Harvest Now Decrypt Later campaigns by state-attributed actors, distinguishing documented collection behaviour from defensible inference.
Hybrid PQC runs two independent key exchange algorithms simultaneously so an attacker must break both. This guide covers combiner constructions, TLS standards, and the X-Wing versus Draft00 distinction.
The quantum migration for most SMB data sits with cloud vendors, not with you. This guide explains the real threat, who is responsible, and the four areas where an SMB genuinely has agency.
Google Willow demonstrated below-threshold error correction in December 2024. What that milestone actually means for the timeline to a cryptographically relevant quantum computer, and why it does not compress the migration window.
AWS, Azure, and GCP have deployed PQC on parts of their infrastructure. The shared responsibility model means customer-controlled workloads remain exposed. What providers handle and what they do not.
End-to-end encryption protects against interception today. Quantum computers will break the key exchange that underpins it. Signal's PQXDH shows what the fix looks like in production.
Most enterprise cyberattacks are unaffected by quantum computing. Three categories are not. This analysis maps quantum relevance against the 10 most common attack types so security teams know where to act and what to ignore.
