TLDR Tech / InfoSec
A Cryptography Engineer's Perspective on Quantum Computing Timelines
Cryptography engineer Filippo Valsorda updated his post-quantum stance after two papers targeting different quantum architectures: a Google paper reducing the qubit count to break 256-bit elliptic curves on superconducting hardware, and an Oratomic paper showing ECC-256 falls with as few as 10,000 physical qubits on neutral-atom non-local connectivity. With Google's Heather Adkins and Sophie Schmieg placing the CRQC deadline at 2029, Valsorda argues the risk now mandates immediate ML-KEM and ML-DSA-44 deployment over hybrid schemes, with any non-PQ key exchange treated as a potential active compromise. TEEs (Intel SGX, AMD SEV-SNP) are flagged as especially exposed, given no known PQ root-of-trust migration path, while file-encryption deployments face store-now-decrypt-later risk requiring urgent PQ recipient rollout.
Read the full story