Loading story…
Post-quantum security researchers warned that public reporting is becoming an unreliable measure of progress toward cryptographically relevant quantum computers, after high-profile disclosures on Shor-based attacks against elliptic-curve cryptography exposed tensions between openness and national-security concerns. Oratomic publicly released resource estimates and a responsible-disclosure statement for fault-tolerant quantum cryptanalysis, while Google published ECDLP-256 resource estimates only after consulting the U.S. government and withheld the underlying circuits behind a zero-knowledge proof. The disclosures were presented as evidence that publication decisions around quantum cryptanalysis are becoming sensitive in their own right, with U.S. export controls, executive actions, and other intervention mechanisms cited as tools that could further limit what becomes public.
Google’s partial-disclosure approach quickly unraveled: André Schrottenloher independently reconstructed the concealed circuits, and Trail of Bits reportedly forged a proof by exploiting bugs in Google’s prover code, undermining the attempt to reveal results without fully exposing implementation details. Commentaries tied those events to a broader warning that future breakthroughs may be selectively disclosed or kept secret altogether, echoing older intelligence-era norms around cryptanalytic advances. For defenders, the practical message was to stop using public quantum milestones as the trigger for post-quantum migration and instead treat published capability as a lower bound while accelerating cryptographic inventory, dependency mapping, and migration planning.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Within 63 days of Google’s March 31, 2026 publication, Trail of Bits forged a proof by exploiting bugs in Google’s prover code, further breaking the intended confidentiality of the hidden circuits.
Within 63 days of Google’s March 31, 2026 publication, André Schrottenloher independently reconstructed the hidden circuits, undermining Google’s partial-disclosure approach.
On March 31, 2026, Google published ECDLP-256 quantum resource estimates after consulting the U.S. government, but withheld the underlying circuits and instead used a zero-knowledge proof to support its claims.
On March 31, 2026, Oratomic publicly released Shor’s algorithm resource estimates along with a responsible disclosure statement warning that future progress toward cryptographically relevant quantum computing may become externally invisible.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
6 references tracked. Mallory keeps watching after this page renders.
postquantum.com
Open sourcepostquantum.com
Open sourcearxiv.org
Open sourcealgassert.com
Open sourceoratomic.com
Open sourcearxiv.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
New quantum-computing research has significantly reduced the estimated resources needed to break widely used public-key cryptography, increasing pressure on organizations still relying on **RSA-2048** and **256-bit elliptic-curve cryptography**. A 2025 Google Quantum AI preprint reported that RSA-2048 factoring could, in theory, be achieved in less than a week with fewer than **1 million noisy qubits**, down roughly **20×** from earlier estimates, by combining techniques such as approximate residue arithmetic, yoked surface-code storage, and magic state cultivation. Separate reporting also described architectural work that could cut the hardware needed for RSA-2048 attacks by about **tenfold**, reinforcing the trend that algorithmic and engineering advances are shrinking the gap between theory and practical cryptanalytic capability. A 2026 paper on the elliptic-curve discrete logarithm problem similarly reduced the logical-qubit footprint for Shor-based attacks, estimating that a **256-bit prime-field curve** could be targeted with about **1,333 logical qubits**, down from **2,124** in a prior low-width design. Commentary on the new results highlighted an additional Caltech advance in lower-overhead fault tolerance and argued that, taken together, these developments could bring quantum attacks against systems such as **Bitcoin signatures** closer than previously expected, with some estimates dropping from millions of physical qubits to around **25,000** under favorable assumptions. While the work remains theoretical and depends on future fault-tolerant hardware, the direction of travel is clear: advances in quantum algorithms and error correction are accelerating the case for migration to **post-quantum cryptography**.
Jun 29, 2026
A *Vulnerable U* episode previewed content filmed at Palo Alto Networks focused on how **quantum computing** is expected to impact security planning over the next decade, arguing that while the underlying physics is complex, many preparedness actions resemble familiar infosec transitions (e.g., inventorying cryptography dependencies and planning migrations). It also highlighted how public debate around **encryption** can be distorted by headlines—citing renewed discussion tied to a **WhatsApp**-related lawsuit and pointing to cryptographer Matthew Green’s technical breakdown as a corrective to overbroad claims that “end-to-end encryption is broken.” Separately, Gopher Security warned that adopting **post-quantum cryptography (PQC)** does not address **implementation-layer leakage**, emphasizing that side-channel attacks (including remotely observable timing/power effects such as *Hertzbleed*) can undermine “quantum-safe” designs. The post described how electromagnetic (EM) emissions from AI hardware can leak sensitive information during inference, citing research such as **BarraCUDA** (weight extraction from NVIDIA Jetson devices via EM measurements) and academic work indicating side-channels can break embedded AI “black-box” assumptions by enabling extraction of logits/weights or gradient estimation—creating model theft and evasion risks even when cryptographic algorithms are strong.
Jun 29, 2026
Google Quantum AI reported that breaking the `secp256k1` elliptic-curve cryptography used by Bitcoin, Ethereum, and other cryptocurrencies may require far fewer quantum resources than previously estimated. In a new whitepaper co-authored with researchers from the Ethereum Foundation, Stanford, and UC Berkeley, the team said an attack could need fewer than 500,000 physical qubits rather than the millions often cited, with optimized circuits using roughly 1,200 to 1,450 high-quality logical qubits. Under idealized conditions, the research suggests a primed attacker could recover a private key in about nine minutes, making an on-spend attack against a Bitcoin transaction theoretically possible within the network’s typical 10-minute confirmation window. The paper warns that Bitcoin’s 2021 **Taproot** upgrade may have increased long-term quantum exposure by making public keys visible on-chain by default, and estimates that about **6.9 million bitcoin** are already held in wallets with exposed public keys. Google said it did not publish the attack circuits, instead releasing a zero-knowledge proof using **SP1 zkVM** and **Groth16** so the results could be validated without providing weaponizable details, and said it notified the U.S. government before publication. While the researchers stressed that no cryptographically relevant quantum computer exists today, they argued that the engineering threshold for attacking ECC-based blockchain systems is materially lower than expected and called for migration toward post-quantum cryptography across cryptocurrency ecosystems.
Jun 29, 2026