Quantum Computing and Cybersecurity: What Changes and When

Quantum computing has moved from physics labs into the headlines, with steady progress in qubit counts, error correction and investment from governments and technology giants. For security professionals, the excitement comes with a serious warning: a sufficiently powerful quantum computer could break the public-key encryption that protects much of today’s internet. Understanding quantum computing cybersecurity implications now gives organisations time to prepare calmly rather than scramble later.

This article explains in plain English what quantum computers can and cannot do, which security systems are at risk, what post-quantum cryptography is, the realistic timeline and a practical roadmap that any organisation can start following in 2026.

How Quantum Computers Differ

Classical computers process bits that are either 0 or 1. Quantum computers use qubits, which can exist in a combination of states through a property called superposition, and can be linked through entanglement. For certain specific types of problems, quantum algorithms can explore possibilities far more efficiently than any classical machine.

It is important not to overstate this. Quantum computers are not simply faster versions of today’s computers, and they will not speed up most everyday tasks. Their advantage applies to particular mathematical problems, and unfortunately, some of those problems underpin modern cryptography. Building useful machines also remains very hard: qubits are fragile, lose their state quickly and need extensive error correction, which is why the number of reliable logical qubits matters far more than headline physical qubit counts.

What Is at Risk

Public-key cryptography

Widely used algorithms such as RSA, Diffie-Hellman and elliptic curve cryptography rely on mathematical problems, like factoring large numbers, that are extremely hard for classical computers. In 1994, mathematician Peter Shor described a quantum algorithm that could solve these problems efficiently. A large, fault-tolerant quantum computer running Shor’s algorithm could therefore break the encryption and digital signatures used in:

• HTTPS connections to websites and APIs.
• VPNs and secure remote access.
• Email encryption and secure messaging key exchange.
• Digital signatures on software updates, documents and certificates.
• Cryptocurrency wallets and many blockchain systems.
• Identity systems and smart cards.

Symmetric encryption and hashing

Algorithms such as AES and SHA-2 are far less affected. Grover’s algorithm offers a quadratic speed-up for brute-force search, which effectively halves the security strength of a key. The usual response is simply to use larger keys and outputs, such as AES-256, which is considered robust against known quantum attacks.

The “Harvest Now, Decrypt Later” Threat

The most urgent quantum computing cybersecurity concern is not a future attack but one that may already be happening. Adversaries can capture and store encrypted data today, then decrypt it years from now when quantum computers become capable. Information that must stay confidential for a long time is especially exposed: government secrets, health records, intellectual property, legal documents, financial data and long-term personal information.

A useful way to think about it is to compare three timeframes: how long your data must remain secret, how long it will take your organisation to migrate to quantum-resistant cryptography, and how long until a cryptographically relevant quantum computer exists. If the first two added together exceed the third, you already have a problem.

Post-Quantum Cryptography Explained

Post-quantum cryptography (PQC) refers to new algorithms that run on ordinary computers but are designed to resist attacks from both classical and quantum machines. After a multi-year public competition, the US National Institute of Standards and Technology published its first PQC standards in August 2024.

Standard	Algorithm	Purpose
FIPS 203	ML-KEM (based on CRYSTALS-Kyber)	Key establishment for encryption
FIPS 204	ML-DSA (based on CRYSTALS-Dilithium)	Digital signatures
FIPS 205	SLH-DSA (based on SPHINCS+)	Hash-based digital signatures

Additional algorithms, including a signature scheme based on FALCON and a backup key-establishment algorithm called HQC, are progressing through the standards process. NIST has also proposed a timeline to deprecate and eventually disallow quantum-vulnerable algorithms such as RSA and elliptic curve cryptography for federal systems by 2035. Major browsers, operating systems and cloud providers have already begun rolling out hybrid key exchange, combining a classical algorithm with ML-KEM, for many connections.

Quantum key distribution (QKD), which uses physics to share keys, is sometimes presented as an alternative. Security agencies generally consider PQC the more practical approach for most organisations because it works over existing networks and hardware.

When Will the Threat Become Real?

No one knows exactly. Breaking RSA-2048 would require a large, error-corrected quantum computer, far beyond today’s machines. Estimates from researchers and government agencies vary, but many security bodies advise planning on the assumption that such a machine could appear within the next decade or so. Because cryptographic migrations historically take many years, waiting for certainty is not a safe strategy. The move away from older algorithms such as SHA-1 and early versions of TLS took well over a decade in many organisations, and post-quantum migration touches far more systems. Devices with long service lives, such as industrial controllers, vehicles, medical equipment and payment terminals, are a particular concern because hardware deployed today may still be running in the 2040s.

Opportunities as Well as Threats

Quantum technology is not only a danger to security. Researchers are exploring several ways it could strengthen defence:

• Quantum random number generation produces high-quality randomness for keys, and some commercial devices already offer it.
• Quantum sensing could detect tampering with physical infrastructure such as fibre-optic cables.
• Optimisation and simulation may eventually help with complex problems in network design and threat modelling, though practical advantages here remain largely unproven.

The migration itself also brings a security benefit. Building a cryptographic inventory often reveals forgotten certificates, outdated protocols and weak configurations that are worth fixing regardless of quantum risk. Many organisations find that preparing for post-quantum cryptography improves their overall security hygiene.

A Practical Readiness Roadmap

Most organisations do not need to rebuild their security overnight. They do need to start. A sensible roadmap looks like this:

1. Raise awareness. Brief leadership on quantum risk and assign an owner for cryptographic readiness.
2. Build a cryptographic inventory. Identify where and how public-key cryptography is used across applications, devices, certificates, VPNs, vendors and data stores.
3. Prioritise by data lifetime. Focus first on systems protecting information that must stay confidential for many years, and on long-lived devices that are hard to update.
4. Engage vendors. Ask suppliers about their PQC roadmap and include quantum readiness in procurement requirements.
5. Adopt crypto-agility. Design systems so algorithms can be swapped through configuration rather than rewriting code.
6. Test hybrid deployments. Pilot PQC and hybrid key exchange in non-critical environments to understand performance and compatibility.
7. Keep symmetric security strong. Use AES-256 and modern hash functions where appropriate.

For small businesses, the main task is to keep software and devices updated, because most PQC protection will arrive through vendors’ updates, and to choose suppliers that are planning for the transition. When renewing contracts for VPNs, firewalls, identity platforms or secure messaging, ask a simple question: when will this product support NIST post-quantum algorithms? A clear, dated answer is a good sign. Vague replies suggest you may need to revisit the choice later.

Frequently Asked Questions

Can quantum computers break encryption today?

No. Current quantum computers are far too small and error-prone to break widely used encryption such as RSA-2048.

Is my data safe if I use AES-256?

AES-256 is considered resistant to known quantum attacks. The bigger risk lies in the public-key methods used to exchange those AES keys.

Do small businesses need to act on quantum computing cybersecurity now?

Mostly by staying updated and asking vendors about their plans. Organisations holding long-lived sensitive data should begin inventory and planning work now.

What is crypto-agility?

It is the ability to change cryptographic algorithms quickly without major redesign, which makes future transitions far easier.

Final Thoughts

Quantum computing promises breakthroughs in science and industry, but it also threatens the cryptographic foundations of digital trust. The response is already under way, with new standards published and major platforms adopting them. Organisations that take quantum computing cybersecurity seriously today, by understanding their cryptography, prioritising long-lived data and building crypto-agility, will make the transition smoothly rather than in crisis.