Q-Day Is Coming Sooner Than We Think – Forbes
Q-Day is the term some experts use to describe when large-scale quantum computers are able to factorize the large prime numbers that underlie our public encryption systems, such as the ones that are supposed to protect our bank accounts, financial markets, and most vital infrastructure.Thats a feat thats all but impossible for even the fastest supercomputers but which the unique features of quantum computers, using the physics of superpositioning and entanglement, will be able to deliver.
Theres a growing consensus that this quantum threat is real; theres no agreement how long it will take before a quantum computer has the 4000 or so stable qubits it will need to meet the requirements of Shors algorithm for cracking those encryption systems.
ADVERTISEMENT
For example, it would take a classical computer 300 trillion years to crack an RSA-2048 bit encryption key.A quantum computer can do the same job in just ten seconds with 4099 stable qubitsbut getting to that number is the main problem quantum computer engineers face since the stability or coherence of qubits lasts only for microseconds. Todays most entangled computer, Googles GOOG Bristlecone, has just 72 stable qubits.
Nonetheless, I have been arguing for the past four years, including in this column, that Q-Day is likely to come sooner than even quantum scientists can predict, and that the time to get ready to protect our vulnerable data and networks is now. Others prefer to procrastinate, citing other experts who say such a threat is at least a decade or more away. The fact that the National Institute of Standards and Technology wont have its quantum-resistant algorithm standards ready until 2024, and expects the rollout to space out for another five to fifteen years, has helped to encourage complacency disguised as confidence.
Quantum computer. Conceptual computer artwork of electronic circuitry with blue light passing ... [+] through it, representing how data may be controlled and stored in a quantum computer.
But new developments in quantum science suggest that this complacency is misplaced. If the large-scale quantum computer is the ultimate thermonuclear device in cyberwarfare, the dirty bomb is the quantum annealerand its probably going to be here sooner than even experts thought.
So-called quantum annealers like the one Canada-based D-Wave Systems, Inc. uses, are able to calculate the lowest energy level between the qubits different states of entanglement, which equals the optimal solution. These machines have proven their worth in solving optimization problems that usually stump classical computers, as I explained in a column last month.
Not surprisingly, scientists have been quietly finding ways to turn factorizationthe decryption process that leads to Q-Dayinto an optimization problem instead of relying Shors algorithm, the paradigm for discussing quantum decryption since the 1990s. In 2019 scientific papers emerged that showed how to do this, including factorizing integers using noisy qubits, i.e. swarms of quantum bits that arent perfectly entangled the way a large-scale computer requires.
One was authored by Chinese scientists who found a way to factor a large number using only 89 noisy qubits. They then showed its possible to factorize a RSA-768 encryption numberthe current factorization record using classical computerswith 147,454 noisy qubits. Thats a tiny fraction of the millions of qubits a large quantum computer would need to reach the 4000 stable qubit threshold, and within reach of the architecture of an annealer like D-Wave Systems.
ADVERTISEMENT
That same year a pair of researchers from Google and the Royal Institute of Technology at Stockholm published a paper showing how to crack 2028-bit RSA integers in 8 hours using 20 million noisy qubits.Given the fact that in 2012 scientists speculated that it would take 1 billion qubits to perform this feat, it wont be long before researchers show they can get there with a lot fewer than 20 million qubits.
Sure enough, in 2020 three Chinese researchers found a way to use the D-Wave quantum computer to factorize large integers, that completely bypasses Shors algorithm. Thus, they concluded, post-quantum cryptography should consider further the potential of the D-Wave quantum computer for deciphering the RSA cryptosystem in future.
In effect, these researchers found a way to turn decryption using quantum technology into a straightforward process on a timeline much shorter than ten years: perhaps four to five years is more likely.
ADVERTISEMENT
This was what Chinese scientists are openly publishing.We dont know whats happening behind the scenes, but we can bet if theres a short cut to achieve what a large-scale quantum computer can do using annealing technology, their military and intelligence services will want to find out.
All this changes the timetable for Q-Day significantly, and our strategic calculations.Not only is quantum-based decryption coming our way sooner, but thanks to annealing that code-breaking feature will be more accessible to other machines than the hugely expensive large-scale computers Google, Microsoft, and others are working onwhich puts the threat within reach of small-state or even non-state actors.
Thats why the dirty bomb analogy is so apt. Why gamble with the quantum future?Annealing technology makes getting quantum ready more important, and getting started now, more imperative than ever.
ADVERTISEMENT
Read the original here:
Q-Day Is Coming Sooner Than We Think - Forbes