Regulating Quantum Computing Before It Breaks Encryption

28 July 2026

The clock is ticking on one of the most profound technological disruptions in history. Quantum computing, once the domain of theoretical physicists and science fiction, is approaching a threshold that will reshape the foundations of digital security. When a sufficiently powerful quantum computer runs Shor's algorithm, it will factor large prime numbers in minutes instead of millennia. That single capability will break RSA encryption, elliptic curve cryptography, and virtually every public-key system that protects online banking, secure communications, and digital signatures today.

The question is not whether this will happen, but when. And the more pressing question for governments, industries, and individuals is what we should do about it right now. Regulating quantum computing before it breaks encryption is not a luxury. It is a necessity that most policymakers have barely begun to address.

Why Quantum Computing Threatens Encryption at Its Core

To understand the regulatory challenge, you must first understand why quantum computers pose such a unique threat. Classical computers use bits that are either 0 or 1. Quantum computers use qubits that can exist in superposition, meaning they can be both 0 and 1 simultaneously. This allows quantum computers to perform certain calculations exponentially faster than any classical machine.

The specific threat to encryption comes from two algorithms. Shor's algorithm, developed by Peter Shor in 1994, can factor large integers and compute discrete logarithms in polynomial time. This directly attacks RSA, Diffie-Hellman, and elliptic curve cryptography. Grover's algorithm, while less dramatic, provides a quadratic speedup for brute-force searches, effectively halving the security of symmetric encryption like AES.

Most people assume this is a distant problem. They think quantum computers are still too small, too error-prone, and too expensive. That assumption is dangerous. The progress in quantum computing over the last five years has been staggering. Companies like IBM, Google, and IonQ have demonstrated quantum processors with over 100 qubits. While error correction remains a major hurdle, the trajectory is clear. A fault-tolerant quantum computer capable of breaking 2048-bit RSA could exist within a decade, possibly sooner.

The Current State of Regulation: A Patchwork of Inaction

Regulation of quantum computing is almost nonexistent. A few countries have published national quantum strategies that focus on funding research and developing talent. The United States passed the National Quantum Initiative Act in 2018, which allocated money for research but included no regulatory framework. The European Union has its Quantum Flagship program, again focused on research. China has invested heavily in quantum technology but provides little transparency about its goals or constraints.

None of these efforts address the core regulatory question: How do we prevent or mitigate the damage when quantum computers break encryption? The answer is not to ban quantum computing, which would be both impossible and counterproductive. Quantum computers have enormous potential for drug discovery, materials science, optimization, and climate modeling. The goal is to manage the transition so that encryption breaks do not cause catastrophic failures in critical infrastructure.

The Harvest Now, Decrypt Later Problem

One of the most urgent regulatory concerns is the "harvest now, decrypt later" threat. Adversaries with long-term strategic interests are already collecting encrypted data that they cannot read today. They store it, waiting for the day when quantum computers can decrypt it. This includes state secrets, financial records, medical data, intellectual property, and personal communications.

If you send an encrypted email today, an adversary could capture it and store it for ten years. When quantum computers mature, that email becomes readable. This is not a theoretical concern. Intelligence agencies have been doing this for decades with classical computing improvements. Quantum computing makes the threat absolute because the data will eventually be decryptable regardless of key length.

Regulation must address this by mandating timelines for migrating to quantum-resistant cryptography. Organizations that handle long-lived secrets, such as government agencies, healthcare providers, and financial institutions, need to begin transitioning now. Waiting until the quantum computer exists is too late.

What Quantum-Resistant Cryptography Actually Means

The solution is not to make classical encryption stronger. Doubling RSA key sizes only delays the inevitable by a small factor. The real solution is post-quantum cryptography (PQC), which uses mathematical problems that are believed to be hard for both classical and quantum computers.

The National Institute of Standards and Technology (NIST) has been running a multi-year process to select and standardize PQC algorithms. In 2024, NIST finalized standards for three primary algorithms: CRYSTALS-Kyber for key encapsulation, and CRYSTALS-Dilithium, FALCON, and SPHINCS+ for digital signatures. These algorithms are based on lattice-based cryptography, hash-based cryptography, and code-based cryptography.

Trade-offs in Post-Quantum Algorithms

No PQC algorithm is perfect. Each comes with trade-offs that regulators and implementers must understand.

CRYSTALS-Kyber offers relatively small key sizes and good performance, making it suitable for general use. However, its security relies on the hardness of the Learning With Errors problem, which is still being studied. If new attacks emerge, the algorithm could become weaker than expected.

SPHINCS+ is a stateless hash-based signature scheme that relies only on the security of hash functions, which are well understood. But its signatures are large, sometimes exceeding 40 kilobytes. That is fine for firmware updates but problematic for constrained devices or high-volume transactions.

FALCON provides small signatures and fast verification but has complex implementation requirements. It is harder to deploy securely without side-channel vulnerabilities.

Regulators cannot simply mandate "use PQC." They must specify which algorithms for which use cases, and they must allow for algorithm agility so that systems can switch if a chosen algorithm is broken.

Practical Regulatory Approaches

Regulating quantum computing before it breaks encryption requires a layered approach. No single regulation will suffice. Here are the key areas that need attention.

Mandating Cryptographic Agility

The most important regulatory requirement is cryptographic agility. Systems must be designed so that cryptographic algorithms can be swapped out without redesigning the entire architecture. This sounds obvious, but most existing systems hardcode algorithms and key sizes. Changing them requires extensive testing, certification, and deployment cycles.

Regulators should require that all new systems, especially those handling long-lived data, support multiple cryptographic algorithms simultaneously. This allows a gradual migration. For example, a system might use both RSA and CRYSTALS-Kyber for key exchange, with the quantum-resistant algorithm taking precedence once it is proven.

Timeline Requirements for Migration

A common mistake is assuming that migration can happen quickly after a quantum computer is demonstrated. That is unrealistic. Migrating cryptographic systems across an entire organization takes years. Large government agencies, financial networks, and healthcare systems have complex legacy infrastructure. They need time to inventory their cryptographic usage, test new algorithms, update hardware, and train staff.

Regulators should establish phased deadlines. For example, all new systems deployed after 2025 should include PQC support. Existing systems handling data with a lifespan beyond 2035 should begin migration by 2028. Systems handling national security information should have even tighter timelines.

Export Controls and Dual-Use Concerns

Quantum computing technology itself has dual-use potential. The same machine that breaks encryption can also simulate molecular interactions for drug discovery. Regulators face the challenge of allowing beneficial research while preventing hostile actors from acquiring the capability to break encryption.

Export controls on quantum computers are already in place in some countries, but they are inconsistent. A more effective approach would be to control access to the algorithms and software libraries that implement Shor's algorithm at scale. However, this is difficult because the algorithm is publicly known and can be implemented on any sufficiently powerful quantum computer.

A better regulatory focus is on the cryptographic infrastructure itself. Requiring that all encryption products sold or deployed in a jurisdiction include PQC support creates a market incentive for adoption. It also ensures that even if a quantum computer is built elsewhere, the data it can access is limited.

Common Misconceptions About Quantum Regulation

Several misconceptions undermine effective regulation. Addressing them is essential for meaningful progress.

Misconception 1: Quantum Computers Will Break Everything Immediately

The reality is more nuanced. Quantum computers excel at specific problems, not all problems. Symmetric encryption like AES-256 is only weakened by Grover's algorithm, which reduces its effective security to 128 bits. That is still strong enough to resist attack for the foreseeable future, provided the implementation is correct.

Hash functions like SHA-256 are also relatively resistant. Grover's algorithm can find preimages faster, but the security margin remains high for practical purposes.

The primary threat is to public-key cryptography used for key exchange and digital signatures. Regulators should prioritize these systems without panicking about all encryption.

Misconception 2: Quantum Key Distribution Solves the Problem

Quantum key distribution (QKD) is often presented as a quantum-safe alternative. QKD uses quantum mechanics to detect eavesdropping on a communication channel. It sounds elegant, but it has serious practical limitations.

QKD requires dedicated fiber optic links or satellite connections. It does not work over the existing internet infrastructure without significant modification. It also does not provide authentication, so it must be combined with classical cryptography to prevent man-in-the-middle attacks. And it is expensive.

For most applications, PQC is a more practical solution. QKD may be useful for specific high-security links, but it is not a general replacement for public-key cryptography.

Misconception 3: Regulation Will Stifle Innovation

Some argue that regulating quantum computing will slow down research and development. This is a valid concern, but the opposite is also true. Without regulation, the transition to quantum-safe cryptography will be chaotic. Organizations will wait until the last minute, creating a scramble that benefits no one.

Smart regulation creates certainty. It gives companies clear targets and timelines. It encourages investment in PQC products because there is a guaranteed market. It also protects consumers and national security by preventing catastrophic failures.

Real-World Examples of Cryptographic Transition

History provides valuable lessons. The transition from SHA-1 to SHA-2 in the early 2000s is instructive. SHA-1 was known to be weakening, but many organizations delayed migration. When practical collisions were demonstrated in 2017, there was a frantic effort to update systems. Some certificate authorities were still issuing SHA-1 certificates after the deadline. The transition was messy and expensive.

The migration to PQC will be far more complex because it affects not just hash functions but the entire public-key infrastructure. Every TLS certificate, every code signing key, every email signature, every VPN connection will need to change.

A better example is the transition from DES to AES in the late 1990s and early 2000s. That transition took over a decade and required coordination between governments, standards bodies, and industry. Even then, some systems still use Triple DES decades after AES was standardized.

The Role of Standards Bodies

NIST, ISO, and other standards bodies are critical for regulation. They provide the technical foundation that regulations reference. Without standards, regulations become vague or unenforceable.

NIST's PQC standardization process is a good model. It was open, transparent, and rigorous. It considered security, performance, and implementation difficulty. The result is a set of algorithms that can be referenced in regulations.

However, standards bodies are slow. They move at the pace of consensus, which is often too slow for technological change. Regulators should not wait for final standards before acting. They can reference draft standards or require algorithm agility that allows for future updates.

Best Practices for Organizations Today

Organizations do not need to wait for regulation to start preparing. The following practices are actionable now.

Conduct a Cryptographic Inventory

You cannot secure what you do not know. Every organization should inventory where cryptography is used: TLS certificates, code signing, email encryption, database encryption, authentication tokens, hardware security modules, and firmware updates. Identify which algorithms are used and where the keys are stored.

This inventory will reveal dependencies that are not obvious. For example, many cloud services use elliptic curve cryptography for TLS. If those services do not support PQC, you need to plan for migration.

Implement Cryptographic Agility

Design new systems so that cryptographic algorithms can be swapped. This means using abstraction layers, avoiding hardcoded algorithm identifiers, and supporting multiple algorithms simultaneously. It also means testing the performance impact of PQC algorithms, which can be significant for constrained devices.

Prioritize Long-Lived Data

Focus migration efforts on data that needs to remain secret for many years. This includes medical records, legal documents, intellectual property, and national security information. Short-lived data, such as session keys for web browsing, is less urgent because it can be re-encrypted with PQC when needed.

Plan for Hybrid Cryptography

A practical approach is hybrid cryptography, which combines classical and quantum-resistant algorithms. For example, a TLS handshake might use both ECDHE and CRYSTALS-Kyber for key exchange. An attacker would need to break both to recover the session key. This provides defense in depth while the PQC algorithms are still being evaluated.

The Geopolitical Dimension

Quantum computing regulation is not just a technical issue. It is deeply geopolitical. Countries that achieve quantum supremacy first will have a significant advantage in intelligence gathering and cyber operations. They will be able to read encrypted communications from other nations, access protected data, and forge digital signatures.

This creates a race. The United States, China, the European Union, and others are investing heavily in quantum research. But the regulatory response is uneven. China has centralized control and can mandate cryptographic migration across its entire infrastructure. Democratic countries must balance regulation with privacy and market freedom.

International coordination is essential but difficult. The cryptography used in one country affects the security of global communications. If the United States mandates PQC but China does not, the weakest link determines overall security. Adversaries will target the jurisdictions with the weakest protections.

The Risk of Fragmentation

A poorly coordinated regulatory environment could lead to fragmentation. Different regions might mandate different PQC algorithms, creating interoperability problems. A certificate signed with Dilithium might not be verifiable in a jurisdiction that mandates Falcon. This would break the global public-key infrastructure that underlies the internet.

Regulators should prioritize interoperability. They can do this by referencing common standards, allowing multiple algorithms, and requiring backward compatibility during transition periods.

What Regulators Must Do Now

Based on the current state of technology and the trajectory of quantum development, regulators should take the following actions immediately.

First, establish a national cryptographic transition office with authority to coordinate migration across government agencies. This office should publish timelines, provide technical guidance, and fund research into implementation challenges.

Second, require all government procurement of cryptographic products to include PQC support. This creates a market demand that drives industry adoption. It also ensures that government systems are protected.

Third, mandate that critical infrastructure sectors, including energy, finance, healthcare, and transportation, submit cryptographic transition plans. These plans should include inventories, timelines, and risk assessments.

Fourth, fund education and training for cybersecurity professionals. Quantum-safe cryptography requires new skills. The current workforce is largely unfamiliar with lattice-based cryptography and its implementation challenges.

Fifth, engage in international diplomacy to establish common standards and timelines. The alternative is a fragmented internet with incompatible cryptographic systems.

The Window of Opportunity

The window for action is narrow but real. Quantum computers that can break RSA are likely 10 to 15 years away, but the preparation time is equally long. Cryptographic migration takes years, especially for large organizations with complex systems. The data that needs protection today must remain secure for decades.

Waiting for a crisis is not a strategy. Regulating quantum computing before it breaks encryption is about managing risk, not eliminating it. No regulation can guarantee that quantum computers will not break encryption. But smart regulation can ensure that the damage is limited, that systems are resilient, and that the transition is orderly.

The alternative is a world where encrypted communications become transparent overnight, where digital signatures cannot be trusted, and where every piece of data collected today is readable tomorrow. That world is avoidable, but only if we act now.