EU warns Q-day may arrive before practical quantum computers

An EU assessment released recently warned that ‘Q-day’—the point when quantum computers can break widely used public-key encryption-could arrive before large-scale, commercially viable quantum machines are available. The document says that gap creates an urgent need for governments and companies to protect sensitive data now.

The assessment outlines two main risks. First, hostile actors could record encrypted communications today and decrypt them later once quantum capabilities improve, a tactic described as ‘store now, decrypt later.’ Second, replacing public-key protections across diverse hardware, software and supply chains will take many years, especially for embedded devices and industrial control systems that are hard to update.

To reduce those risks, EU technical advisers recommended immediate steps. Agencies and firms should inventory cryptographic assets, classify data by how long it must remain confidential, and begin testing and deploying post-quantum cryptographic algorithms in systems that require long-term secrecy. The guidance also highlights the need for secure software update mechanisms and stronger key-management practices to enable a broad migration.

The EU is also advancing quantum-safe communications infrastructure. The EuroQCI initiative aims to build a secure quantum communication backbone across member states using a mix of fiber-based quantum links and satellite systems. Officials said that infrastructure will complement algorithmic defenses, especially for high-value government and critical infrastructure traffic.

Standards bodies and research programs are part of the response. International and national agencies are evaluating and selecting post-quantum algorithms, while EU funding programs such as the Quantum Flagship and Horizon Europe support work on both quantum technology and defenses. Technical advisers warned that standards adoption, software integration and device updates will require coordination between vendors, regulators and network operators.

The assessment lists practical challenges. Replacing public-key algorithms in web connections, virtual private networks and digital signatures requires software and hardware changes across millions of devices. Legacy systems in health care, energy, transportation and government, some of which must protect data for decades, will be especially difficult to update. The advisers urged organizations to prioritize systems that protect long-lived secrets and to plan phased migration timelines.

Industry responses include accelerated internal assessments and pilot deployments of quantum-resistant algorithms. Financial institutions and defence contractors have been identified as sectors that should move quickly because of the sensitivity and longevity of their data. The EU called for information sharing on migration experience and coordinated procurement of quantum-safe solutions to reduce fragmentation and improve interoperability.

The assessment frames the timing gap as the central issue: quantum algorithms such as Shor’s could, in principle, break RSA and elliptic-curve systems, and the window between a machine’s ability to break keys and the widespread availability of such machines may be short. The EU’s documents recommend treating the threat as immediate and beginning migration and infrastructure work now.