04: What Quantum Computers Can Break—and What They Cannot

What Quantum Computers Can Break—and What They Cannot

Quantum computers create a serious problem for some of the public-key cryptography that modern digital systems rely on. They do not make every encryption method, password manager, encrypted disk, or secure connection suddenly useless.

The question readers are really asking

Will a future quantum computer break all encryption?

No. That statement is too broad to be useful.

A sufficiently large, fault-tolerant quantum computer would threaten major public-key systems such as RSA and elliptic-curve cryptography. Those systems are used to establish secure connections, create digital signatures, and verify identity.

But much of the encryption that protects actual data uses symmetric algorithms such as AES and ChaCha20. These face a different, more limited quantum threat. They remain important parts of security after Q-Day, especially when strong keys and sound implementation are used.

The practical lesson is simple:

Quantum computing changes some cryptographic foundations much more than others.

The short answer

The systems most directly threatened by Q-Day are classical public-key systems based on factoring or discrete logarithms. That includes RSA, Diffie–Hellman, elliptic-curve key exchange, and widely used elliptic-curve signature systems such as ECDSA and EdDSA.

Symmetric encryption, hash functions with appropriate security margins, and well-designed password-based encryption usually remain useful. They may need conservative choices and future updates, but they are not broken in the same way.

What breaks and what remains useful

The word usually matters. Security depends on the complete design: algorithms, key sizes, password quality, implementation, recovery procedures, software updates, and the way cryptographic components are combined.

Why public-key cryptography is the main concern

Public-key cryptography solves two difficult problems.

First, it helps parties establish a shared secret. A browser and website may use it to create a temporary session key, then use symmetric encryption to protect the traffic.

Second, it supports digital signatures, which verify the source and integrity of certificates, software updates, documents, transactions, and credentials.

RSA and elliptic-curve systems rely on mathematical problems that are difficult for conventional computers. A future quantum computer running Shor’s algorithm could solve those problems much more efficiently. That is why these systems need post-quantum replacements or hybrid upgrades.

Why AES and ChaCha20 are different

AES and ChaCha20 are symmetric encryption algorithms. The same secret key, directly or indirectly, protects and unlocks the data.

The best-known general quantum attack against symmetric keys is based on a search method that can reduce the work needed for brute-force guessing. That is important, but it is not comparable to the structural break that quantum computing creates for RSA and elliptic-curve systems.

A 256-bit symmetric key provides a large security margin. This is why AES-256 and ChaCha20 remain sensible choices for protecting data at rest and in transit. They should still be implemented correctly, used with secure key management, and updated as cryptographic guidance evolves.

Hash functions remain useful, with care

Hash functions support integrity checks, authentication, signatures, and password protection. Quantum algorithms may offer limited advantages against some hash attacks, but not the Shor-style break that affects RSA and elliptic curves. Use standard hashes with adequate output lengths and follow future guidance; no fixed configuration should be treated as permanently “quantum-safe.”

Password-derived encryption: strong design still matters

Many encrypted vaults and archives ultimately depend on a password or passphrase. In those cases, the practical risk often begins with the quality of the password, not with a quantum computer.

A strong design uses a high-entropy passphrase and a memory-hard key-derivation function such as Argon2id, which makes large-scale password guessing more expensive. A short, reused, predictable, or exposed password can still fail, so password managers, unique passphrases, protected recovery keys, and strong multi-factor authentication remain essential.

Full-disk encryption remains valuable

Full-disk encryption commonly relies on AES-XTS or related symmetric designs. A powered-off device remains substantially protected after Q-Day when its password, recovery key, and software configuration are sound.

It cannot stop malware on an unlocked device, a stolen recovery key, phishing, insecure cloud copies, or a person who already has access.

That is why device encryption should be viewed as one important layer of security, not the entire security plan.

PGP/GPG and cryptocurrency: public-key migration matters

Classical PGP/GPG encryption often uses a public-key algorithm to protect the symmetric key that encrypts the message or file. If that layer uses RSA or elliptic-curve cryptography, it may become vulnerable even though the underlying file encryption is symmetric.

The same distinction matters for cryptocurrencies. Many rely on classical public-key signatures to authorize transactions. Protection will require coordinated protocol-level migration, not merely a “quantum-safe wallet.”

What remains a present-day risk

For most people, the more immediate threats are still familiar:

• phishing and account takeover;
• weak or reused passwords;
• malware and malicious browser extensions;
• unpatched software and devices;
• insecure backups, cloud sharing, or stolen recovery keys; and
• screenshots, copies, or forwarding by authorized recipients.

Quantum computing does not make these risks less serious. A device compromised today does not need a quantum computer to expose its files.

What readers should do now

1. Keep strong symmetric protection in place. Continue using device encryption, encrypted backups, and reputable password managers.
2. Choose sensible settings when a choice exists. AES-256, long unique passphrases, and modern password-based protection provide useful margins.
3. Keep software current. Post-quantum upgrades will usually arrive through supported operating systems, browsers, cloud platforms, and applications.
4. Treat long-lived data differently. Health, legal, research, financial, and institutional records may require planning for future public-key migration.
5. Watch for credible vendor migration plans. Look for specific discussion of hybrid cryptography, key rotation, certificates, signatures, and crypto agility—not generic “quantum-proof” marketing.

What readers do not need to do

Most people do not need to turn off FileVault or BitLocker, abandon password managers, replace all encrypted archives immediately, change browser cipher suites manually, or buy a product merely because it advertises “quantum encryption.”

The key is to understand the distinction. Q-Day threatens particular public-key foundations. It does not erase the value of strong symmetric encryption, sound password practices, device security, and regular software updates.

Takeaway: Quantum computers could break important public-key systems, but they do not make all encryption useless. Strong symmetric encryption, password protection, and full-disk encryption remain essential—while public-key systems gradually migrate to post-quantum alternatives.

Key terms

Public-key cryptography
Cryptography using a public key and a private key, commonly used for key establishment, digital signatures, certificates, and identity.

Symmetric encryption
Cryptography in which a secret key protects and unlocks data. AES and ChaCha20 are common examples.

ECDSA and EdDSA
Widely used digital-signature systems based on elliptic-curve cryptography.

Hash function
A one-way mathematical function used for integrity checking, authentication, digital signatures, and many other security tasks.

Argon2id
A memory-hard password-hashing and key-derivation method designed to make password guessing more costly.

AES-XTS
A mode of AES commonly used to encrypt data stored on disks and other storage devices.

Crypto agility
The ability to update cryptographic algorithms, keys, certificates, and protocols without rebuilding an entire system.

Watch Video Summary