Quantum Computing: From Theory To Existential Threat

Most emerging technologies improve on what came before. Quantum computing works on different principles altogether, and for a narrow but important set of problems it changes what is computationally possible. Some of those problems are the ones that keep financial infrastructure, intellectual property, and digital trust secure. AI and blockchain have drawn more public attention, but quantum computing poses a more direct challenge to the cryptography modern finance depends on. Additionally (and importantly), quantum computing unlocks a variety of scientific realities that we could have only dreamed of.

What Is Quantum Computing?

Quantum computing harnesses the principles of quantum mechanics to process information in ways that are impossible for classical computers. Unlike classical bits that exist as either 0 or 1, quantum bits (qubits) can exist in superposition, simultaneously representing both states until measured. When multiple qubits become entangled, they create correlations that allow quantum computers to explore vast solution spaces in parallel. This quantum parallelism enables certain computational tasks to be performed exponentially faster than on any classical computer, no matter how powerful [1].

A problem that would take a classical supercomputer thousands of years to solve might be tractable for a sufficiently advanced quantum computer in hours or days. This capability is not universally applicable to all problems, but for specific classes of mathematical challenges—particularly those involving prime factorization and unstructured search—quantum computers offer revolutionary advantages [2].

From Feynman's Vision to Physical Reality

The conceptual seeds of quantum computing were planted in 1981 when physicist Richard Feynman delivered a keynote address at MIT's First Conference on the Physics of Computation. Feynman observed that simulating quantum mechanical systems on classical computers becomes prohibitively expensive as systems grow larger—the computational resources required grow exponentially with the number of particles. His insight was elegantly simple yet profound: nature itself is quantum mechanical, so perhaps we should build computers that operate on quantum principles to efficiently simulate quantum systems.

Feynman's suggestion was more than academic curiosity. He recognized that certain problems in physics, chemistry, and materials science were fundamentally intractable for classical computers because they required modeling quantum interactions. A quantum computer, he reasoned, wouldn't need to simulate these interactions—it would embody them. This vision laid the theoretical groundwork for what would become decades of work to turn theory into working machines.

Throughout the 1980s and 1990s, physicists and computer scientists developed the mathematical frameworks for quantum computation, proving that quantum computers could theoretically solve problems beyond the reach of classical systems. The field remained largely theoretical until the late 1990s, when researchers began building rudimentary quantum processors with a handful of qubits. Today, companies like IBM, Google, and IonQ operate quantum computers with hundreds of qubits, though creating stable, error-corrected systems capable of running useful algorithms at scale remains an active area of research [1][12].

Three Parallel Frontiers: Hardware, Algorithms, and Applications

Understanding quantum computing requires distinguishing between three interconnected but distinct domains: quantum computer development (the hardware), quantum algorithms (the mathematical procedures), and quantum applications (the practical use cases).

Quantum Computer Development focuses on building physical systems that can reliably create, manipulate, and measure qubits. Multiple technological approaches compete in this space, each with distinct advantages and challenges. Superconducting qubits, used by IBM and Google, require temperatures near absolute zero but can be manipulated with nanosecond precision. Trapped ion systems, pursued by IonQ and Quantinuum, offer longer coherence times but slower gate operations. Photonic quantum computers encode information in light particles, while topological quantum computers attempt to use exotic quantum states that are inherently resistant to errors.

The central challenge in quantum hardware is decoherence—qubits are extraordinarily fragile, losing their quantum properties through interaction with the environment in microseconds or milliseconds. Building a useful quantum computer requires more than creating qubits: it means maintaining their quantum state long enough to perform meaningful computation and implementing quantum error correction to detect and fix errors faster than they accumulate [1][2][12].

Quantum Algorithms are the mathematical procedures designed to run on quantum computers. Unlike quantum hardware, which is still in early development, quantum algorithms are well-established theoretical constructs, proven mathematically long before quantum computers capable of running them exist. Two algorithms stand out for their implications for cryptography and search [3][4].

Shor's Algorithm, published by mathematician Peter Shor in 1994, efficiently factors large numbers into their prime components. On a classical computer, factoring a 2048-bit number (617 decimal digits) would require computational resources far beyond what exists or could plausibly exist. Shor's algorithm could factor such numbers in polynomial time on a quantum computer with sufficient qubits and error correction—estimates suggest a few thousand to tens of thousands of logical qubits would suffice [3]. This capability is existential for modern cryptography, as RSA encryption, which secures everything from credit card transactions to classified government communications, relies entirely on the assumption that factoring large numbers is computationally infeasible [11].

Grover's Algorithm, developed by Lov Grover in 1996, provides a quadratic speedup for unstructured search problems. While less dramatic than Shor's exponential advantage, Grover's algorithm is broadly applicable to any problem that can be formulated as searching through possible solutions. For cryptographic purposes, this means a 256-bit symmetric encryption key, which would require 2^256 operations to break via brute force on a classical computer, would require only 2^128 operations on a quantum computer using Grover's algorithm—still computationally infeasible, but a meaningful reduction in security margin. Unlike Shor's algorithm, Grover's algorithm doesn't break symmetric encryption outright; it simply means we need to double key lengths to maintain equivalent security [4].

Quantum Applications represent the practical problems quantum computers are being developed to solve. These range from drug discovery and materials science (simulating molecular interactions for pharmaceutical development or designing better batteries) to optimization problems (routing logistics networks, portfolio optimization in finance) to machine learning (potentially accelerating certain AI training and inference tasks). However, the application with the most immediate strategic significance remains cryptanalysis—the ability to break existing cryptographic systems.

The Cryptographic Singularity: Quantum Computing and Financial Infrastructure

The link between quantum computing and cybersecurity rests on mathematics, not speculation. A sufficiently powerful quantum computer would render obsolete the public-key cryptography that secures modern digital infrastructure. What remains uncertain is the timing, and what the consequences will be for financial systems and credit markets [11].

A typical online banking session shows how deep the dependence runs. When you access your bank account online, your browser establishes a secure connection using TLS (Transport Layer Security), which relies on RSA or elliptic curve cryptography for key exchange. The bank's server presents a digital certificate signed by a certificate authority, itself protected by RSA signatures. Your username and password are transmitted over this encrypted channel, then verified against a database where they are stored as cryptographic hashes. The funds transfer itself is authenticated using digital signatures. Every layer of this security stack assumes that certain mathematical problems—primarily integer factorization and discrete logarithms—are computationally intractable [11].

A quantum computer running Shor's algorithm invalidates all of these assumptions simultaneously. An attacker with such a computer could decrypt intercepted communications, forge digital signatures, impersonate secure websites, and potentially extract private keys from observed transactions. The financial consequences would compound quickly.

Immediate Transaction Risks: At the transaction level, quantum-enabled attackers could intercept and decrypt wire transfers, steal credentials from captured traffic, and forge authenticated payment instructions. Suppose an adversary intercepts the encrypted traffic between correspondent banks settling international payments through SWIFT. With quantum decryption, they could extract authentication credentials and forge payment messages, potentially redirecting millions or billions in settlement flows before detection.

The 2016 Bangladesh Bank heist, where attackers stole $81 million through forged SWIFT messages, demonstrates the vulnerability. Those attackers needed to compromise the bank's systems directly; quantum computing would allow similar attacks purely by intercepting and decrypting authenticated payment messages, without needing to breach internal networks. With roughly $5 trillion in payments flowing through SWIFT daily, even a 0.01% diversion would represent billions in theft.

Vulnerabilities in financial market information: Financial scoring, loan underwriting, and risk assessments increasingly rely on alternative data sources and proprietary algorithms. If these communications can be decrypted retroactively (the "harvest now, decrypt later" threat where adversaries capture encrypted data today for future quantum decryption), competitive intelligence or manipulation of markets becomes feasible [11][5].

Financial markets also depend on the integrity of identity systems. For instance, a borrower's credit history, their legal identity tied to specific debts and assets, relies on authenticated records in credit bureaus and land registries. Blockchain-based systems recording property ownership or loan agreements are secured by the same cryptographic primitives vulnerable to quantum attack. An attacker who can forge signatures on these records could potentially repudiate debts, claim false ownership of assets, or create phantom creditworthiness.

These identity and integrity issues extend beyond consumer finance to commercial credit. Supplier financing, where companies extend payment terms to suppliers based on supply chain finance platforms, relies on authenticated invoice data and credit assessments. Quantum forgery could allow fraudulent suppliers to present fake invoices with apparently legitimate authentication, drawing against credit facilities based on fictitious receivables.

Trade Finance Example: The letter of credit system in international trade finance makes the threat concrete. A U.S. electronics retailer orders $50 million in consumer electronics from a Chinese manufacturer. The importer's bank issues a letter of credit guaranteeing payment upon proof of shipment. The Chinese exporter's bank accepts this letter of credit based on trust in the importer's bank's digital signature and the encrypted communication channel through which the letter was transmitted.

In a post-quantum-break scenario, an attacker could intercept the original letter of credit, forge a modified version with different payment terms or beneficiary, and present it to the Chinese bank. The damage would spread from the banks to the entire supply chain: the manufacturer might ship goods that will never be paid for (costing them $50 million in product and opportunity cost), the retailer might lose their inventory (creating stock-outs during critical sales periods like holiday season), and consumers face product shortages. The letters of credit themselves might be sold to third-party financiers who provide working capital to exporters—quantum forgery could create synthetic trade assets, similar to how synthetic CDOs amplified the 2008 financial crisis.

The global trade finance market exceeds $10 trillion annually. Even a 1% compromise rate would represent $100 billion in fraudulent or contested transactions, enough to trigger liquidity crises at major banks and freeze trade credit markets, disrupting global supply chains from semiconductor manufacturing to pharmaceutical distribution to automotive parts.

Systemic Financial Risk: Perhaps the most troubling scenario is systemic risk from loss of confidence. If quantum computers break cryptography before replacement systems are fully deployed, the financial system faces a crisis of trust. Imagine a quantum attack on a major financial institution is publicly demonstrated. Even if direct financial losses were contained, the mere knowledge that encrypted transactions could be decrypted retroactively would undermine confidence in digital financial records across all industries.

Mortgage-backed securities, for example, derive value from authenticated chains of mortgage ownership and payment histories. If these digital records cannot be trusted, the securitization markets could freeze. Derivative contracts, which often involve complex legal agreements authenticated through digital signatures, might face questions about enforceability. Credit default swaps, which provide insurance against default, depend on verifiable credit events—but what constitutes a verified default if digital signatures can be forged?

The cross-industry contagion would be severe. Manufacturing companies unable to authenticate supply chain payments might halt production, creating inventory shortages. Retailers losing confidence in payment systems might revert to cash transactions or face dramatic increases in fraud losses. Pharmaceutical companies might need to recall drugs if chain-of-custody documentation is questionable. The effects could rival or exceed the 2008 financial crisis, where loss of confidence in mortgage-backed securities froze credit markets, but with the added dimension of questioning the authenticity of digital records across the entire economy.

Cross-Industry Cryptographic Vulnerabilities

The quantum threat extends far beyond financial services, touching every industry that depends on digital authentication, encrypted communications, or secure data storage. The following examples illustrate how quantum computing creates materiality risks across industries [11].

Manufacturing and Industrial Control Systems: Modern manufacturing facilities operate as integrated cyber-physical systems where production lines, robotics, and quality control systems communicate over encrypted networks. A global automaker's manufacturing execution systems (MES) coordinate just-in-time inventory, robotic assembly, and quality testing across facilities in multiple countries. These systems authenticate commands using digital signatures and encrypt communications between factory floor controllers and enterprise planning systems.

A quantum-enabled attacker who can forge authenticated commands could manipulate production parameters—altering torque specifications on critical fasteners, modifying welding temperatures, or changing material compositions. Such attacks might not trigger immediate failures but could create latent defects that manifest as safety recalls years later. A single compromised production batch affecting brake systems or airbag controllers could result in millions of vehicle recalls, liability claims exceeding billions of dollars, and permanent reputational damage. The 2014 GM ignition switch recall, which cost the company $4.1 billion and resulted from an internal design flaw, illustrates the financial magnitude. A deliberate quantum-enabled attack creating similar widespread defects would be catastrophic.

Beyond automotive, semiconductor fabrication facilities ("fabs") represent extreme vulnerability. Companies like TSMC, Intel, and Samsung operate fabs where production recipes—the precise sequence of lithography, etching, and deposition steps—constitute trade secrets worth billions. These recipes are transmitted as encrypted files to fabrication equipment. If quantum decryption allows competitors to steal these process parameters, it could eliminate years of R&D advantage. Malicious modification of fabrication parameters could also introduce microscopic flaws that create backdoors in chips destined for critical applications, from data centers to military systems.

Supply Chain and Logistics: Global supply chains depend on encrypted documentation and authenticated tracking at every node. In pharmaceutical supply chains, manufacturers must maintain chain-of-custody documentation for drug shipments from factory to pharmacy. These systems use digital signatures to authenticate temperature logs, location data, and custody transfers, ensuring drugs weren't tampered with or subjected to conditions that might compromise efficacy.

Quantum-enabled forgery could allow counterfeiters to create entirely fabricated chain-of-custody records for fake pharmaceuticals, making counterfeit drugs indistinguishable from authentic ones in tracking systems. The WHO estimates that 1% of medicines in developed countries and 10% in developing countries are counterfeit. Quantum computing could make this problem vastly worse by defeating the cryptographic protections designed to prevent it. For high-value biologics that cost $100,000+ per treatment course, even a small percentage of counterfeits represents both patient safety risks and massive financial exposure.

Container shipping illustrates another vulnerability. Maersk, MSC, CMA CGM, and other carriers handle electronic bills of lading that transfer legal ownership of cargo. These digital documents, replacing traditional paper documents, are cryptographically signed to prevent fraud. A quantum attacker could forge bills of lading to claim ownership of cargo, potentially redirecting entire container loads worth millions of dollars. For high-value shipments—electronics, pharmaceuticals, luxury goods—the ability to forge authenticated transfer documents opens the door to theft on a large scale.

Materials and Chemicals: Chemical and materials companies protect proprietary formulations as trade secrets. Companies like Dow Chemical, BASF, and 3M maintain thousands of formulations for specialty chemicals, adhesives, polymers, and composites. These formulations are stored in encrypted databases and transmitted to manufacturing facilities over encrypted channels. The formula for a high-performance adhesive used in aerospace applications or a proprietary catalyst improving refining efficiency might represent decades of R&D investment and generate hundreds of millions in annual revenue.

Quantum decryption would allow industrial espionage at scale. State actors or competitors could systematically harvest encrypted R&D communications, patent applications before publication, and formulation databases. Companies like DuPont have historically prosecuted trade secret theft cases worth billions—in one case, a former employee stole documents DuPont valued at $400 million. Quantum computing could enable similar theft remotely and undetected, targeting hundreds of formulations simultaneously by decrypting archived communications.

Process control systems in chemical plants also use encrypted communications to prevent unauthorized modification of reaction parameters. A quantum attacker forging authenticated commands could alter temperature, pressure, or reagent ratios in chemical reactors, potentially causing explosions, toxic releases, or environmental contamination. The 2008 Bayer CropScience explosion, which killed two workers, resulted from process failures; a deliberate quantum-enabled attack on process controls could create similar incidents at scale.

Consumer Products and Retail: Consumer-facing companies face quantum threats on several fronts. Major retailers like Walmart, Target, and Amazon process millions of payment card transactions daily. While EMV chip cards provide some protection, the broader payment infrastructure—acquirer processors, payment networks, and issuing banks—relies on TLS encryption and RSA key exchange. Quantum decryption of these communications could expose card numbers, CVV codes, and personal information at scale.

The 2013 Target breach compromised 40 million payment cards through a vendor credential compromise, costing Target over $290 million in settlements and remediation. A quantum-enabled attack that could systematically decrypt payment network traffic would be far more severe, potentially exposing every transaction across entire payment networks over months or years. Credit card fraud costs U.S. merchants and issuers roughly $11 billion annually; quantum computing could multiply this several-fold.

Product authentication presents another vulnerability. Luxury goods companies like LVMH (Louis Vuitton, Dior, Tiffany) increasingly use digital certificates and blockchain-based systems to authenticate products and combat counterfeiting. A $5,000 handbag or $50,000 watch might include a digital certificate of authenticity signed by the manufacturer. If quantum computers can forge these signatures, counterfeiters could create indistinguishable fakes with "authentic" documentation, potentially collapsing the premium pricing that depends on verified scarcity and authenticity.

Customer data represents long-term exposure. Retailers maintain encrypted databases of purchase histories, browsing behavior, and personal preferences. Retailers' recommendation engines, inventory optimization, and customer analytics all depend on proprietary algorithms processing sensitive data. The "harvest now, decrypt later" threat means adversaries could capture this encrypted data today and decrypt it years later when quantum computers become available, exposing competitive intelligence and creating privacy violations under regulations like GDPR and CCPA [11].

Durable Goods and Connected Devices: The Internet of Things creates attack surfaces across consumer durables. Automotive companies increasingly offer connected vehicle features—Tesla's over-the-air updates, GM's OnStar, Ford's connected navigation. These systems use public-key cryptography to authenticate software updates, preventing malicious actors from installing unauthorized firmware that could compromise vehicle safety or create ransomware scenarios where vehicles won't start without payment.

Quantum-enabled signature forgery could allow attackers to push malicious updates that appear legitimate. If an attacker forged Tesla's code-signing certificate, it could distribute malicious firmware that disables safety features or creates remote kill switches. With more than 7 million Tesla vehicles on the road, such an attack could threaten public safety at scale and destroy trust in connected vehicle features that increasingly differentiate manufacturers.

Similar risks extend to smart home devices, industrial equipment, and medical devices. Companies like Medtronic, Abbott, and Boston Scientific manufacture implantable cardiac devices that receive software updates cryptographically authenticated to prevent malicious modification. The FDA has issued guidance requiring encryption and authentication for connected medical devices. Quantum computers that can forge these authentications would create safety risks affecting millions of patients and significant liability exposure for manufacturers.

Home appliance manufacturers like Whirlpool, Samsung, and LG produce smart refrigerators, thermostats, and security systems that communicate with cloud services. Beyond the privacy concerns of quantum-decrypted home surveillance footage or thermostat data (revealing when homes are occupied), these devices increasingly participate in demand-response programs where utilities pay homeowners to reduce consumption during peak demand. Quantum-forged authentication could allow attackers to falsify participation, stealing payments, or maliciously manipulate thousands of thermostats to stress power grids by simultaneously increasing demand.

The "Harvest Now, Decrypt Later" Threat

The "harvest now, decrypt later" (HNDL) threat refers to adversaries collecting and storing encrypted data today, intending to decrypt it in the future once a cryptographically relevant quantum computer becomes available. Because some data (e.g., personal records, intellectual property, classified information, long-term secrets) remains sensitive for years or decades, the confidentiality of data encrypted with current public-key algorithms is at risk even before a quantum computer exists [11][5].

A hostile actor who could read encrypted internet traffic would gain access to "personal information such as medical or criminal records, to financial information such as bank account and credit card numbers, to cutting-edge commercial research and development, to classified national security information" [11]. This means migration to quantum-resistant algorithms must occur before a cryptographically relevant quantum computer exists, not after.

The Migration Challenge: Post-Quantum Cryptography

The cryptographic community is not passively awaiting quantum computers. The National Institute of Standards and Technology (NIST) has led a multi-year effort to standardize post-quantum cryptography—algorithms believed to be secure against both classical and quantum attacks. In 2024, NIST announced its first set of post-quantum cryptographic standards, including algorithms for key exchange and digital signatures based on mathematical problems believed to be quantum-resistant (lattice-based cryptography and hash-based signatures). In 2025, NIST added a code-based encryption algorithm as a backup [5][6][7][8][9].

However, migrating global financial infrastructure to post-quantum cryptography is an enormous challenge. Every TLS connection, every digital certificate, every encrypted database, every signed contract must be transitioned to new algorithms. Legacy systems must be identified and upgraded or replaced. Beyond the technical work, it requires coordination across thousands of financial institutions, technology vendors, and regulatory jurisdictions.

The financial services industry has experience with large-scale technology migrations—the Y2K remediation, the transition to chip-based credit cards, the implementation of Dodd-Frank reporting requirements. The quantum threat is harder to plan for because the timeline is uncertain. Estimates for when a cryptographically-relevant quantum computer might exist range from a decade to several decades. This uncertainty creates a collective-action problem: individual institutions have incentives to delay expensive migration efforts, but collectively, delay increases systemic risk [5][10][11].

The "harvest now, decrypt later" threat also means that migration must happen sooner than the arrival of quantum computers. Any sensitive data encrypted today with RSA and captured by adversaries could be decrypted in the future once quantum computers become available. For financial institutions holding long-term secrets—customer data, trading algorithms, merger and acquisition plans—the exposure has already begun [5][11].

Conclusion: The Strategic Imperative

It is unusual for physicists, national security agencies, and the financial industry to agree on an emerging threat. On quantum computing they largely do: the mechanism is precise and well understood, even if the timeline is not. Many technology risks are matters of forecasting. The cryptographic implications of quantum computers follow from proven mathematics, and on the planning horizons that matter for long-lived data and infrastructure, they may arrive sooner than many organizations expect [3][11][13].

The path forward requires three parallel efforts. First, inventory cryptographic dependencies across all systems and begin systematic migration to post-quantum algorithms, prioritizing systems that handle the most sensitive long-term data. Second, develop quantum-resistant protocols for key processes such as authentication, settlement, and contract execution before quantum computers force a reactive scramble. Third, model and stress-test financial systems against scenarios where cryptographic trust fails, developing contingency plans for verification and reconciliation in compromised environments.

The imperative extends well beyond finance. Manufacturing companies must secure their industrial control systems and protect trade secrets in R&D databases. Supply chain operators need quantum-resistant authentication for shipping documents and custody transfers. Retailers must protect payment infrastructures and customer data. Materials and chemical companies need to encrypt formulations against "harvest now, decrypt later" attacks. Consumer electronics and automotive manufacturers must ensure connected devices can authenticate software updates. Every industry touching digital authentication, encrypted communications, or secured data storage faces similar migration challenges.

Beyond bank systems, the work reaches manufacturing execution systems, supply chain platforms, retail payment terminals, connected vehicle fleets, smart grid infrastructure, pharmaceutical tracking systems, and thousands of other specialized applications. Each industry has unique legacy systems, regulatory requirements, and operational constraints. A coordinated response requires technology vendors and enterprises to work alongside standards bodies, industry consortia, and regulatory frameworks that provide clear timelines and requirements for post-quantum migration.

Quantum computing began with Feynman's observation about simulating nature; it has become a strategic issue across the global economy. Organizations that start the transition now can preserve trust and competitive position through it. Those that wait risk emergency remediation under crisis conditions, at the moment cryptographic trust is most fragile.

Sources

1. IBM Quantum
2. Arute et al., "Quantum supremacy using a programmable superconducting processor," Nature (2019)
3. Shor, "Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer" (1994)
4. Grover, "A fast quantum mechanical algorithm for database search" (1996)
5. NIST, "NIST Releases First 3 Finalized Post-Quantum Encryption Standards" (Aug. 2024)
6. NIST CSRC, "Post-Quantum Cryptography FIPS Approved" (2024)
7. FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard (ML-KEM)
8. FIPS 204: Module-Lattice-Based Digital Signature Standard (ML-DSA)
9. FIPS 205: Stateless Hash-Based Digital Signature Standard (SLH-DSA)
10. NIST IR 8547: Transition to Post-Quantum Cryptography Standards
11. RAND, "When a Quantum Computer Is Able to Break Our Encryption, It Won't Be a Secret" (2023)
12. IonQ
13. NSA, "Quantum Computing and Post-Quantum Cryptography FAQs" (2021)