Quantum computers and the future of encryption

You may have read that quantum computers will break all encryption. The honest version is narrower and more interesting.

What quantum could break

A large, reliable quantum computer could run an algorithm (Shor's) that breaks the public-key methods behind most key exchange today, including RSA and elliptic-curve systems. As far as I know, no machine near that size exists yet, and estimates for when one might vary widely.

What it mostly does not break

Symmetric ciphers like AES-256 are in much better shape. A quantum attack would roughly halve their effective strength, which still leaves a very large margin. Doubling key size, which AES-256 already does, is the standard answer.

Why people prepare now

The worry is "harvest now, decrypt later." Someone could record encrypted traffic today and wait until they have the tools to open it. That matters for secrets that must stay secret for decades.

Standards bodies have been choosing replacement methods. In 2024 NIST published its first post-quantum standards, and some messaging apps have begun adding hybrid key exchange that combines old and new methods.

What you can do

• Use services that keep their cryptography up to date and say how.
• Do not keep sensitive data you do not need.
• Keep your devices and apps updated, since that is how new methods reach you.