RSA's Clock is Ticking: Experts Debate Whether Google's 10-Year Warning Is Technical or Pure Panic
US agencies issued a 2022 warning: quantum computers threaten critical infrastructure, demanding a transition to new encryption systems by 2035.
Commenters are split on the threat level. Some cite Google's Willow chip needing millions of qubits and place the danger at least a decade out, while another notes a non-peer-reviewed paper claims breaking strong RSA requires only 372 qubits. The core technical debate centers on error rates, with Tsinghua University's Guilu Long flatly stating that qubit count means nothing without error rate reduction.
The general consensus accepts the fundamental mathematical threat of Shor's algorithm to RSA. However, the conversation reveals deep division on timing: Is the barrier millions of physical qubits, or is the limitation fundamentally about achieving error-free computation? The threat is established; the immediate timeline is hotly contested.
Key Points
#1The definitive threat exists from Shor's algorithm.
Multiple users (leanleft) affirm that the algorithm mathematically proves the vulnerability of RSA encryption.
#2Google's hardware timeline suggests a decade-plus runway.
lemmydev2 reports that Google stated its Willow chip is not a CRQC, estimating RSA requires around 4 million physical qubits.
#3Physical qubit count is not the true limiting factor.
Guilu Long stated emphatically: 'Simply increasing the qubit number without reducing the error rate does not help.'
#4There is conflicting data on minimum qubit requirements.
One source mentions a paper suggesting breaking strong RSA needs only 372 qubits, contradicting the millions needed elsewhere.
#5The threat requires massive scale beyond current hardware.
leanleft notes that the largest available machine, IBM's Osprey chip, has only 433 qubits, vastly short of the required millions.
Source Discussions (3)
This report was synthesized from the following Lemmy discussions, ranked by community score.