Q-Day is coming and it might break the entire internet

Q-Day is coming and it might break the entire internet

A digital deadline known as "Q-Day" looms over the global financial system, government secrets, and personal privacy. It represents the moment a quantum computer becomes powerful enough to crack the most widely used forms of encryption, potentially turning the current pillars of cybersecurity on their head.

While classical computers run on 0s and 1s, quantum technology harnesses subatomic mechanics to operate on qubits, which can exist as both 0 and 1 simultaneously in a state of superposition. This allows quantum machines to explore many potential solutions at once. For the average user, this means a machine could potentially derive a private encryption key from a public one in minutes, rather than the millennia it would take a classical supercomputer.

The Shor Catalyst

The theoretical foundation for this threat was established in 1994. Computer scientist Peter Shor, while at Bell Labs in New Jersey, developed a quantum algorithm capable of finding the factors of large numbers much faster than traditional computers. This discovery directly threatened public-key encryption, such as the RSA algorithm developed in the late 1970s, which secures emails, websites, and bank transactions by relying on the extreme difficulty of factoring enormous numbers.

Henry Everitt, a physicist and chief scientist with the United States Army, noted that current computers would take roughly the age of the universe to find those factors. Shor's algorithm proved a quantum computer could do it in far less than 13.8 billion years.

The discovery sparked an arms race. In 1995, the US National Institute of Standards and Technology (NIST) built the first quantum logic gate. By 2001, IBM successfully ran Shor's algorithm to factor the number 15. Today, tech giants including Google, Huawei, IBM, and Microsoft are pursuing the technology for drug development, materials science, and market analysis, while the US, EU, and China pour resources into state-backed efforts.

The "Harvest Now, Decrypt Later" Risk

Though a cryptographically relevant quantum computer does not yet exist, experts warn that the danger is already present through harvest now, decrypt later attacks. In these scenarios, bad actors — including reported Chinese state-aligned hackers — collect and store encrypted data today, waiting for the hardware to mature so they can decrypt it in the future.

Sushmita Ruj, associate professor at the University of New South Wales' Institute for Cybersecurity, describes this as a potential real catastrophe. While some data, like current credit card details, may lose value over time, other information, such as fingerprints or intelligence assets, remains sensitive for decades.

The threats are categorized into two areas: confidentiality and authentication. Beyond eavesdropping on military data, such as submarine locations or satellite intelligence, a Q-Day computer could allow adversaries to impersonate rightful owners of critical infrastructure. Deborah Frincke, a computer scientist at Sandia National Laboratories, warns that this could allow an attacker to shut down energy grids or disrupt stock markets by pretending to be an authorized user.

The Race for Quantum-Safe Standards

In 2016, NIST launched a competition to find quantum-proof algorithms. After a cut-throat peer-review process where cryptographers attempted to break proposed ideas, NIST slimmed the options down to three winners by 2022. These new standards often use structured lattices, complex multidimensional mazes, to thwart quantum navigation.

Transitioning the entire internet to these standards is an expensive and time-consuming endeavor. Some organizations have already moved:

• Google and Amazon: Both companies have published transition plans.

Timelines and Consequences

Estimates on the arrival of Q-Day vary. The latest Quantum Threat Timeline Report suggests it is quite possible within 10 years and likely within 15. A survey of experts cited by Michele Mosca of the Global Risk Institute found a one-in-three chance that Q-Day occurs before 2035. Some estimates even suggest a 15 percent chance it has already happened in secret.

Immediate government action is underway. The Australian Government wants organizations to have transition plans by the end of this year.