Q-Day: The Math Has Been Solved Since 1994.
The Clock Is Running.

Peter Shor proved it in 1994. A 30-year-old algorithm is the loaded gun pointed at the infrastructure the modern world runs on. We've known this. We've watched the hardware race close the gap year by year. And now, in December 2024, Google dropped a chip that changed the conversation permanently.

This isn't hypothetical anymore. This is a countdown.

The Benchmark That Changed Everything

Google's Willow chip — 105 qubits — was given a random circuit sampling problem. The best measure of raw quantum capability. Here's the result:

That last line is the one that matters. Every prior quantum system got noisier as it got bigger — the fundamental engineering problem that kept quantum computers in the lab. Willow broke that pattern. As it scaled, it got more accurate. Not less.

Hartmut Neven, Director of Google Quantum AI Lab, went further. He suggested Willow's results offer evidence for the many-worlds interpretation of quantum mechanics — that the computation is literally occurring across parallel branches of reality simultaneously. Whether that's the right physics or not, the result is real. Willow did the calculation.

The Arms Race: Who's Building What

The Alice & Bob number deserves special attention. If you can reduce the physical qubits required per logical qubit by 200x, the math on when we reach "millions of stable qubits" changes dramatically. That's not incremental improvement. That's a different curve entirely.

Shor's Algorithm: A 1994 Proof That's About to Change the World

Peter Shor published his algorithm in 1994. That's not a typo. Thirty years ago, a mathematician proved that quantum computers could break RSA encryption in hours. We've been living in the window between proof and capability ever since. That window is closing.

Here's why RSA-2048 works, and why Shor's algorithm kills it:

Shor's algorithm uses quantum superposition to explore many possible prime factors simultaneously. Then quantum interference amplifies the correct answers and cancels the wrong ones. What takes a classical machine 1 trillion years takes a quantum machine running Shor's: hours.

The wall isn't the math. The wall isn't even the physics. The wall is engineering — specifically, building stable qubits at scale. And we're watching three of the best-funded technology organizations in history sprint toward that wall from the other side.

Q-Day: Defined and Scoped

Q-Day is the moment a quantum computer becomes powerful enough and stable enough to run Shor's algorithm against real-world RSA-2048 encryption. It's not a gradual degradation. It's a threshold event.

Here's what breaks — not over years, not gradually — but on the day:

The software update one gets underestimated. Every signed update from Apple, Microsoft, and every major vendor becomes forgeable on Q-Day. A fake OS update becomes cryptographically indistinguishable from a real one. That's not a data breach. That's infrastructure takeover at scale.

Harvest Now, Decrypt Later — Already Happening

This is the part people miss when they say "Q-Day is 10-15 years away, so I'll worry about it then."

You're already in the attack window.

Nation-states, intelligence services, and sophisticated criminal organizations are already harvesting encrypted data today. They're not waiting. They're collecting now because they're betting — correctly — that the decryption capability is coming.

"Schrödinger's Data" — encrypted information that is simultaneously safe and compromised. It's in a superposition until Q-Day collapses the wave function. — Framing used by security researchers to describe harvested-but-unread encrypted archives

What's being collected right now:

• Old cryptocurrency transactions and dormant wallet data
• Entire blockchain archives
• Personal data profiles: name, location, employment, email, behavioral patterns
• Government and military communications
• Corporate IP and financial records encrypted in transit

Today, harvested personal profiles get sold to advertisers. On Q-Day, the guard rails on those profiles evaporate. The same data that funds targeted ads becomes the raw material for identity fraud, blackmail, and targeted manipulation at nation-state scale.

The Stasi Parallel: What Surveillance Looks Like Without Encryption

In 1989, when East German citizens stormed Stasi headquarters, they found 111 kilometers of paper files. Roughly 1 in 3 East Germans — in a country of 16 million — had been surveilled. The reach of the most sophisticated surveillance state in history was constrained by paper, typewriters, and human labor. It had a natural ceiling.

Today, major intelligence agencies generate more surveillance data in a single day than the Stasi collected across its entire 40-year existence.

The only thing standing between that data and complete legibility is encryption. Governments currently run into it constantly — the Apple backdoor refusals being the most public example. Apple's position has been consistent: build a backdoor for one case and you create a vulnerability for everyone.

Post-Q-Day: governments don't need Apple's cooperation. They don't need backdoors. They don't need warrants or legal frameworks or international agreements. The encryption that makes those negotiations necessary simply stops working.

The Chain Problem: Internet Fragmentation Is Coming

Here's the part nobody talks about enough. Even if your organization migrates to post-quantum cryptography perfectly and on time, you're not protected if your counterparties haven't.

The security of any connection equals the strength of its weakest participant.

Think about a single transaction: your laptop → Amazon → Mastercard → your bank → settlement system → overseas counterpart → shipping provider. Every link in that chain works today because all parties share a cryptographic language. Your bank migrates. Your bank's settlement counterpart abroad hasn't. The chain breaks at that link.

NIST has called post-quantum migration "the largest infrastructure project in the history of the internet." The historical precedent — the transition from older standards to AES and SHA-256 — took many years with far less complexity. This migration is orders of magnitude larger.

The result is what researchers are calling the tiered internet: a quantum-secured inner network for institutions that move fast, and everything outside it becoming a dangerous wasteland. The death of the old, open internet as we know it.

The Race: Where We Stand

China has committed $15 billion to quantum research. They're not doing this because they think it's far away. Classified cryptographic transition conferences — briefings most of the public has never heard of — are actively driving the architecture of what comes next. This is happening at the nation-state level, in rooms you don't have access to, on timelines we're only estimating from public signals.

What Quantum Builds — Not Just Destroys

The threat framing is necessary. But the full picture matters. Quantum computing isn't only a weapon against current infrastructure. It's also going to solve problems that classical computing cannot touch.

This is the full arc. The same technology that breaks RSA-2048 accelerates drug discovery by decades, enables materials we can't currently synthesize, and solves optimization problems that have constrained logistics and finance for generations. The question isn't whether quantum computing arrives. It's whether we're positioned for it.

What You Actually Need to Do

The NIST post-quantum cryptography standards are finalized. The migration framework exists. The three NIST-approved algorithms — CRYSTALS-Kyber for key exchange, CRYSTALS-Dilithium and FALCON for signatures — are ready for implementation. What's missing is urgency.

The precedent from the AES and SHA-256 transition is instructive. That migration took years and was simpler in every dimension than post-quantum migration. The organizations that started early completed it cleanly. The ones that waited scrambled. The difference between those categories was not resources — it was lead time.

The harvest is already happening. The clock started in 1994 when Shor published the proof. It accelerated in December 2024 when Willow solved the scaling problem. You don't have to treat Q-Day as an emergency today. You do have to treat it as a deadline that's moving toward you faster than the public timeline suggests.

"Every scar is a credential." The organizations that come out of the quantum transition intact will be the ones that started treating it seriously before anyone else told them to. — QSL operating principle

The math is solved. The physics is achievable. The engineering is time. And time is exactly what we're running out of.