Tag: Post-Quantum Cryptography

  • Quantum Computing Becomes a Regulatory Priority for EU Banks and Crypto Custodians

    Quantum Computing Becomes a Regulatory Priority for EU Banks and Crypto Custodians

    The European Union’s three financial supervisors have added quantum computing to their autumn 2026 risk assessment, expanding regulatory attention on how banks, exchanges, and custodians prepare for future cryptographic threats.

    The European Banking Authority, the European Insurance and Occupational Pensions Authority, and the European Securities and Markets Authority issued the assessment through their Joint Committee on September 23. Core findings had already reached the EU Economic and Financial Committee’s Financial Stability Table on September 10.

    The update places quantum computing alongside two other major concerns: reliance on providers and infrastructure outside the EU, and rapid growth in private credit markets.

    Why quantum risk matters for finance

    Supervisors said quantum computing could transform several areas of finance, including process optimization, fraud detection, compliance monitoring, pricing, and financial simulations. Yet the same technology could weaken cryptographic systems that institutions use at scale to protect communications, transactions, databases, and blockchains.

    The assessment does not claim that quantum computers can currently break Bitcoin, Ethereum, or modern financial encryption. Nor does it describe an active quantum attack on European financial infrastructure. Instead, it focuses on preparation for a potential technological shift.

    ‘Harvest now, decrypt later’ raises the stakes

    A central concern is timing. The supervisors warned that quantum risks could emerge before commercially viable quantum applications become widely available, creating a security challenge before many firms gain practical economic benefits from the technology.

    The threat also extends beyond future data. Attackers could collect encrypted information today and attempt to decode it years later when stronger computers become available—a method known as “harvest now, decrypt later.” Information intercepted now could therefore face future exposure if it retains financial or security value for many years.

    Existing EU rules push cryptographic migration

    European rules already provide a framework for dealing with emerging technology risks. The Digital Operational Resilience Act requires financial entities to use state-of-the-art cryptography against developing threats. The EU’s NIS Cooperation Group has also recommended that member states adopt a post-quantum cryptography migration strategy by the end of 2026.

    The September risk update arrives during a broader push toward digital resilience. On September 23, ESMA also named digital innovation as a new supervisory priority beginning in 2027.

    Bitcoin exposure illustrates the preparation gap

    For blockchain networks, some exposure can already be measured. Glassnode reported in May that 6.04 million BTC had public keys visible on-chain, representing 30.2% of Bitcoin’s issued supply. Glassnode valued those coins at more than $469 billion at the time of its assessment.

    According to the risk discussion, those visible public keys could become potential targets if a sufficiently advanced quantum computer gained the ability to defeat the cryptography protecting them. Such exposure would not necessarily require holders to make a new transaction.

    Estimates for so-called Q-Day—the point when quantum computers could break cryptographic protections underpinning networks including Bitcoin and Ethereum—vary. The material cited ranges from 2030 to 2032 and later.

    What it means for investors and custody providers

    For investors, the September assessment does not change the status of existing holdings today. It does, however, change the standards against which exchanges, banks, and custodians can increasingly be measured.

    Users can examine whether custody providers track post-quantum risks, maintain cryptographic migration plans, and explain how they intend to adapt security systems. Those checks rely on current provider practices rather than waiting for quantum technology to reach cryptographic-breaking capability.

    Bottom line

    EU supervisors now treat quantum computing as a financial security risk that requires preparation rather than immediate alarm. DORA and the 2026 migration timeline add pressure for stronger planning, while Bitcoin’s visible public-key exposure shows why crypto custodians must prepare before quantum capabilities mature.

  • Quantum Computing in 2026: Key Trends and Milestones Shaping the Next Phase

    Quantum Computing in 2026: Key Trends and Milestones Shaping the Next Phase

    Quantum computing is entering a pivotal phase in 2026, moving beyond the race for raw qubit counts to focus on logical qubits, error correction, scalable hardware, and practical workloads. Researchers are shifting from theoretical potential to systems that could bring quantum computers closer to real-world applications. Here are the key developments to watch this year.

    Quantum Error Correction Takes Center Stage

    Error correction is becoming a critical benchmark for quantum computers. Google’s Willow research demonstrated below-threshold error correction, where larger encoded systems reduced logical errors. The next milestones include longer-lived logical qubits, reliable logical gates and lower hardware costs, making error correction a primary focus for progress.

    Verified Quantum Advantage Gains Attention

    Google’s Quantum Echoes work reported a verifiable quantum advantage on its Willow processor, performing a calculation faster than leading classical approaches. The algorithm also pointed toward molecular-structure applications. Independent verification and strong classical comparisons remain important for establishing credible quantum advantage.

    Quantum Hardware Paths Diverge

    Superconducting, trapped-ion, neutral-atom, photonic and silicon-spin systems are taking different scaling approaches. Neutral atoms offer large arrays and flexible connectivity, while silicon-spin systems could benefit from links to established semiconductor manufacturing, creating diverse hardware ecosystems.

    Logical Qubits Matter More Than Raw Qubit Counts

    A large number of physical qubits does not automatically mean a useful quantum computer. Physical qubits are fragile, so error correction creates reliable logical qubits. Future progress will increasingly depend on logical-qubit performance, error rates and useful circuit operations rather than raw numbers.

    Quantum Computing Moves Toward Real-World Workloads

    Researchers are testing quantum systems for chemistry, materials science, optimisation and other specialised problems. Near-term systems are likely to combine classical computers with quantum processors rather than replace traditional computing infrastructure, focusing on hybrid workflows.

    Cloud Access Expands Enterprise Testing

    Quantum computing is increasingly available through cloud platforms, allowing businesses and researchers to test algorithms without owning quantum hardware. The next phase will focus on quantum-classical workflows, better simulators, hardware-neutral software and repeatable enterprise pilots.

    Post-Quantum Security Is Underway

    Quantum computing also creates a cybersecurity challenge. NIST finalised three post-quantum cryptography standards in 2024: ML-KEM, ML-DSA and SLH-DSA. Organisations are now preparing systems for migration away from quantum-vulnerable public-key cryptography.

    The Next Quantum Milestones to Watch

    Watch for more reliable logical qubits, lower error rates, independently reproducible quantum benchmarks, stronger quantum-classical workflows and measurable commercial applications. The key question is shifting from how many qubits exist to how reliably and economically they can perform useful work.

  • XRP vs Algorand: Which Blockchain Is Leading the Race for Quantum-Resistant Security?

    XRP vs Algorand: Which Blockchain Is Leading the Race for Quantum-Resistant Security?

    Quantum computing is becoming an increasingly important long-term security question for cryptocurrency networks. Today’s quantum computers cannot simply break XRP, Algorand or other major cryptocurrencies. However, sufficiently powerful future quantum computers could threaten some of the public-key cryptography used to protect blockchain accounts.

    Why Could Quantum Computing Threaten Crypto?

    Blockchain wallets rely on digital signatures to prove that transactions have been authorized by the legitimate owner. A sufficiently powerful fault-tolerant quantum computer could theoretically use Shor’s algorithm against certain public-key cryptographic systems. The immediate threat remains theoretical as existing quantum computers lack the scale and reliability necessary to perform such attacks against major blockchain networks. However, replacing cryptography across an entire decentralized ecosystem could itself take years.

    Algorand Has Established a Quantum Timeline

    Algorand has made post-quantum security a visible part of its development roadmap. In June 2026, the Algorand Foundation announced a target of achieving broad quantum resilience by the end of 2027, according to Algorand’s official post-quantum roadmap. The strategy includes post-quantum accounts and Falcon-based cryptographic signatures. Algorand has since released native post-quantum accounts, representing an important milestone toward its 2027 objective.

    Why Falcon Signatures Matter

    Falcon is a post-quantum digital-signature scheme designed to remain secure against attacks from both classical and quantum computers. Algorand has already used Falcon signatures within its State Proof infrastructure and is expanding post-quantum capabilities into user accounts. This is important as quantum preparedness requires more than publishing research. Wallets and users will eventually need practical mechanisms to migrate funds into quantum-resistant accounts.

    What About XRP?

    The XRP Ledger also relies on cryptographic signatures to authorize transactions. Like other blockchain networks using current public-key cryptography, XRP would eventually require upgrades if cryptographically relevant quantum computers become practical. The difference today is the roadmap’s visibility. Algorand has established specific milestones, deployed post-quantum infrastructure and attached a 2027 target to its broader migration strategy.

    XRP vs Algorand: Which Is Ahead?

    Based strictly on publicly announced and deployed post-quantum infrastructure, Algorand currently appears further along. That does not mean ALGO is necessarily a better investment than XRP. XRP has different advantages involving liquidity, payments infrastructure and ecosystem adoption. Quantum preparedness represents only one component of a blockchain’s long-term investment case. Investors should instead monitor whether networks develop post-quantum signatures, migration mechanisms, wallet support and consensus-level protections. Quantum computers may still be years away from threatening today’s cryptography. However, as blockchain migrations also take time, the networks preparing before the threat becomes urgent could have an important advantage.

    Why This Matters

    Quantum security could eventually determine whether blockchain networks can protect user funds and maintain trust as computing technology advances. Early preparation gives networks more time to upgrade infrastructure, migrate accounts and address vulnerabilities before quantum computing becomes a practical threat.

    Final Thoughts

    Algorand currently has a clearer and more advanced public roadmap for post-quantum security, while XRP has yet to demonstrate a publicly announced implementation at the same level. However, quantum readiness is only one factor when evaluating blockchain. For investors, the key will be watching how both networks turn quantum-security research into practical upgrades.

    FAQs

    1. Can quantum computers currently break XRP or Algorand? No. Current quantum computers lack the scale and reliability required to break the cryptographic protections used by major blockchains such as XRP and Algorand.
    2. Why could quantum computing become a threat to cryptocurrencies? Powerful fault-tolerant quantum computers could theoretically use algorithms such as Shor’s algorithm to attack certain public-key cryptographic systems used to secure blockchain accounts and transactions.
    3. How is Algorand preparing for quantum computing? Algorand is targeting broad quantum resilience by the end of 2027. Its strategy includes native post-quantum accounts, Falcon-based signatures and further upgrades to its cryptographic infrastructure.
    4. Is the XRP Ledger quantum-resistant today? XRP Ledger currently relies on conventional cryptographic signatures and would require future upgrades if quantum computers become capable of defeating those systems. There is no immediate practical quantum threat today.
    5. Is Algorand better prepared for quantum computing than XRP? Based on publicly announced roadmaps and deployed post-quantum infrastructure, Algorand currently appears further ahead. However, quantum readiness alone does not determine which blockchain or cryptocurrency is a better investment.
  • How Ethereum’s Quantum-Safe Roadmap Protects ETH Investors: What You Need to Know

    How Ethereum’s Quantum-Safe Roadmap Protects ETH Investors: What You Need to Know

    Quantum computing remains a long-term rather than immediate threat to Ethereum, but developers are already preparing for a world where today’s cryptography may no longer be sufficient. For ETH investors, the key question is whether Ethereum can migrate safely before quantum computers become powerful enough to break existing protections.

    Why Ethereum Needs Quantum Resistance

    Ethereum currently relies on several cryptographic systems that future quantum computers could threaten. These include ECDSA signatures used by accounts, BLS signatures used by validators, KZG commitments for data availability, and some zero-knowledge proof systems.

    No quantum computer today can break Ethereum’s cryptography, but research from Google Quantum AI (March 2026) indicates that breaking 256-bit elliptic-curve cryptography may require roughly 1,200 logical qubits — about 20 times fewer than earlier estimates. This has accelerated Ethereum’s planning.

    Ethereum’s Post-Quantum Roadmap

    The Ethereum Foundation has established a dedicated post-quantum team and a structured roadmap targeting approximately 2029 for core post-quantum infrastructure. The upgrade is phased:

    • Milestone I: A post-quantum key registry for validators.
    • Milestone J: Post-quantum signature-verification precompiles, designed as a minimal viable post-quantum Layer 1 safeguard that could keep Ethereum operating through a potential “Q-day” — when cryptographically relevant quantum computers emerge.
    • Later milestones: Post-quantum attestations, real-time consensus proofs, signature aggregation, and quantum-safe blob commitments.

    Ethereum’s September 2026 protocol update explicitly identifies Milestone J as a temporary safeguard to bridge the gap until a full transition.

    Testing is Already Underway

    The roadmap isn’t just theoretical. More than 10 client teams are participating in weekly post-quantum interoperability devnets. Open-source projects including leanXMSS, leanVM, leanSig, and leanMultisig are under active development.

    Funding signals commitment: The Poseidon Prize offers $1 million for improvements to hash-based cryptographic primitives, and the Foundation continues to support post-quantum consensus and signature research.

    What This Means for ETH Investors

    Quantum readiness matters as Ethereum secures far more than ETH itself. Stablecoins, DeFi protocols, tokenized assets, and smart contracts all depend on the network’s cryptographic security.

    Migration will be complex. Post-quantum signatures tend to be larger and harder to aggregate efficiently than existing ones, potentially increasing bandwidth and computation. Ethereum must also offer a practical migration path for existing accounts. Its 2026 protocol priorities highlight native account abstraction as one route away from ECDSA-based authentication.

    Ethereum does not face an immediate quantum emergency. Its advantage is preparation time. The 2029 roadmap, active devnets, and dedicated research funding show that quantum resistance is moving from discussion to implementation. For ETH investors, progress on these milestones could become an increasingly important measure of Ethereum’s long-term security.

  • Ethereum’s 2029 Deadline: How the Network Plans to Defeat Quantum Computing Threats

    Ethereum’s 2029 Deadline: How the Network Plans to Defeat Quantum Computing Threats

    Ethereum developers have stopped treating quantum computing as a distant theoretical concern. The network now runs a dedicated post-quantum program with a target for core quantum-resistant infrastructure around 2029.

    No quantum computer today can break Ethereum’s cryptography. But replacing cryptographic systems across wallets, validators, and scaling infrastructure could take years, making early preparation essential before powerful quantum machines arrive.

    Four Major Quantum Risks for Ethereum

    Ethereum relies on several cryptographic systems that could become vulnerable to sufficiently powerful quantum computers:

    • ECDSA – protects ordinary user accounts
    • BLS signatures – secure validator consensus
    • KZG commitments – support data availability
    • Zero-knowledge systems – many rely on elliptic-curve assumptions

    Shor’s algorithm running on a powerful quantum computer could undermine these systems. Google Quantum AI research from March estimated that breaking 256-bit elliptic-curve cryptography might require roughly 1,200 logical qubits — substantially lower than earlier estimates. Current quantum machines remain far from that level.

    Ethereum’s Dedicated Post-Quantum Team

    The Ethereum Foundation formed its post-quantum security team in January 2026. By April, more than ten client teams were participating in weekly interoperability devnets. The Foundation also launched a USD 1 million Poseidon Prize to support research into hash-based cryptographic primitives.

    The proposed migration is gradual rather than one massive network upgrade. Validators could eventually register quantum-resistant keys alongside their current BLS credentials, with later upgrades adding native verification and transitioning consensus toward post-quantum signatures.

    Hash-Based Signatures Could Replace BLS

    Ethereum is developing leanXMSS, a hash-based signature scheme intended to replace quantum-vulnerable BLS validator signatures. The challenge is size: a leanXMSS signature can be roughly 3,000 bytes compared with 96 bytes for BLS. To solve this, Ethereum plans to use leanVM to aggregate larger signatures into compact proofs, potentially compressing data by about 250 times. KZG commitments could eventually be replaced by STARK- or lattice-based alternatives.

    Wallet Flexibility Through Account Abstraction

    User accounts pose another challenge. Ethereum is considering native account abstraction via EIP-8141, which would allow individual wallets to adopt different signature schemes instead of requiring every account to migrate simultaneously. The Ethereum Foundation’s September protocol priorities now rank the post-quantum transition as near-term engineering work, citing a December 2029 commitment for critical deliverables.

    Why 2029 Matters

    Ethereum does not need quantum resistance because ETH is unsafe today. It needs it because cryptographic migrations cannot be completed overnight. The 2029 target is a planning milestone rather than a guarantee. The real test will be whether Ethereum can migrate consensus, wallets, and data commitments without sacrificing performance or fragmenting users. Preparing years early gives the network substantially more room to solve that problem before quantum computing becomes an actual security threat.

    Frequently Asked Questions

    1. Can quantum computers break Ethereum today? No. Current quantum computers are not powerful enough, but sufficiently advanced machines could eventually threaten signatures and other cryptographic systems.
    2. What parts of Ethereum are vulnerable? ECDSA, BLS signatures, KZG commitments, and some elliptic-curve-based zero-knowledge systems.
    3. What is leanXMSS? A hash-based signature scheme being developed to replace BLS validator signatures. Its main challenge is larger signature sizes.
    4. How could Ethereum wallets become quantum-resistant? Through native account abstraction (EIP-8141), allowing wallets to adopt new signature schemes without simultaneous migration.
    5. Why is 2029 important? The Ethereum Foundation identified December 2029 as a key target for critical post-quantum work, providing a planning milestone for ecosystem migration.
  • Quantum Computing vs. Blockchain: Separating Cryptography Myths from Real-World Risks

    Quantum Computing vs. Blockchain: Separating Cryptography Myths from Real-World Risks

    Quantum computing does not pose an immediate threat to blockchain, but it does challenge the cryptography behind digital signatures and wallets. The industry is already preparing with post-quantum cryptography and migration strategies. Understanding the real risks helps separate technical reality from common misconceptions.

    How Blockchain Security Works

    Blockchain security relies on cryptographic algorithms, consensus rules, a distributed network, and incentive structures. Quantum computing only affects cryptography, not consensus or network integrity. The real quantum risk is concentrated in the cryptographic layer that secures digital signatures and wallet control.

    Shor’s vs. Grover’s Algorithm

    Two quantum algorithms drive this conversation, but they are not equally significant. Shor’s algorithm can theoretically break elliptic curve cryptography, allowing attackers to derive private keys from exposed public keys. This would enable forged signatures and fraudulent transactions. In many networks, public keys remain hidden until a transaction is signed, limiting exposure for unused addresses. Grover’s algorithm accelerates brute-force searches against hash functions, but its impact is modest and can be offset by longer hash outputs. Treating these two threats as identical is a common mistake.

    Is Blockchain at Risk Today?

    No existing quantum computer is capable of running Shor’s algorithm at the scale needed to threaten current signatures. Researchers refer to a “cryptographically relevant quantum computer” (CRQC) as the threshold, and current hardware remains far short due to error rates and qubit instability. The migration conversation is urgent because building and testing replacement cryptography takes years. Waiting for a CRQC to appear would leave networks exposed during the transition.

    Where Quantum Risk Exists

    Quantum risk is not evenly distributed across a blockchain network. It is concentrated in identity and authorization—specifically the cryptographic algorithms used for digital signatures and wallet security. Consensus mechanisms and ledger validation remain unaffected.

    Post-Quantum Blockchain Upgrades

    The response is already underway. NIST finalized its first set of post-quantum cryptography (PQC) standards in 2024, giving developers real building blocks. Blockchain researchers are testing quantum-resistant signature schemes, and some projects have begun hybrid migrations that layer new cryptography alongside existing systems. This phased approach enables upgrades without breaking compatibility. Enterprise blockchain applications—such as supply chain tracking and identity systems—face the same cryptographic exposure as cryptocurrency wallets.

    What This Means for Users

    Investors should evaluate a project’s readiness for post-quantum migration alongside traditional metrics. Projects actively testing quantum-resistant signatures signal stronger planning. Builders should monitor signature scheme upgrades and wallet compatibility. Crypto asset holders do not need to act today; the transition will likely happen gradually through wallet updates. Exchanges and custodians will probably lead the shift, rolling out new signature standards before individual users notice changes.

    Final Thoughts

    The quantum threat to blockchain is real, specific, and manageable. It sits almost entirely in the cryptographic layer, driven by Shor’s algorithm. The industry has years of runway before a CRQC becomes a practical concern. Post-quantum cryptography is not a hypothetical defense—it is standardized, tested, and already being integrated into next-generation blockchain infrastructure.

    Frequently Asked Questions

    1. Will quantum computing break blockchain?
    Not immediately. It threatens certain cryptographic algorithms used for digital signatures. Most experts expect networks to transition to PQC before CRQCs become widely available.

    2. What is the biggest quantum threat to blockchain?
    The greatest risk is to public-key cryptography, especially elliptic curve cryptography (ECC), which secures wallets and verifies transactions. Consensus mechanisms are not directly broken.

    3. What is post-quantum cryptography?
    PQC refers to algorithms designed to resist attacks from both classical and quantum computers. It is the leading strategy for protecting blockchain and other digital systems against future quantum threats.

    4. Are today’s blockchains already preparing?
    Yes. Many projects, researchers, and standards organizations are exploring quantum-resistant signature schemes, hybrid approaches, and migration strategies.

    5. Should investors and developers worry now?
    No immediate panic is needed, but preparation is important. Investors should follow projects with clear upgrade plans; developers should design adaptable systems and monitor PQC advances.