Skip to main content
Exhibit 9 of 23
Hall 3 · Exhibit 2 1 min

The Quantum Hardware Race & Q-Day

Engineering reality and the collapsing timeline

TodayHundreds of noisy qubits
To break RSA-2048Millions of error-corrected qubits
Estimate trend20× lower in 6 years (20M → <1M)
Most estimatesQ-Day in ~10–15 years
Try it yourself
Threat Timeline
Scrub a cursor through 2020–2040 and watch milestones light up.

The Engineering Reality

Qubits are extremely fragile. A microscopic temperature fluctuation causes decoherence (data loss). Quantum processors run in dilution refrigerators near absolute zero. Current machines have hundreds of noisy qubits; breaking RSA-2048 requires millions of stable, error-corrected ones. Most experts estimate 10–15 years to Q-Day.

The Hardware Race

IBM unveiled its 120-qubit Nighthawk chip in late 2025, targeting fault-tolerance by 2029. PsiQuantum pursues photonic qubits. Neutral-atom platforms demonstrate control over thousands of qubits. Each advancement shortens the timeline.

Collapsing Resource Estimates

Gidney · May 2025

RSA-2048 revised from 20M to under 1M noisy qubits — a 20× drop in six years.

Iceberg Quantum · Feb 2026

Quantum LDPC codes suggest RSA-2048 is tractable with under 100K physical qubits.

Google / Stanford · Mar 2026

ECDLP-256 breakable with under 500K qubits — in minutes.

Caltech–Berkeley · Mar 2026

Neutral-atom designs estimate Shor's with just 10K–20K atomic qubits.

The AI-Accelerated Threat

AI-assisted cryptanalysis is compressing the cost of finding implementation flaws. Cryptographic code is small, well-bounded, with crisp correctness criteria — exactly what AI excels at scrutinizing. Anthropic's Project Glasswing deploys AI to find zero-days across critical software in partnership with Google, Microsoft, NVIDIA, and Palo Alto Networks.

Harvested ciphertext may become decryptable before a CRQC exists, through classical implementation flaws discovered at AI-assisted scale.

Key Takeaways

  • Current quantum computers have hundreds of noisy qubits; breaking RSA needs millions of error-corrected ones
  • Resource estimates have collapsed 20× in six years — from 20M qubits to under 1M
  • AI-assisted cryptanalysis may expose vulnerabilities before a CRQC even exists