Why quantum computers change the rules
Most of the encryption the modern economy runs on — the TLS that protects web traffic, the RSA and ECC keys behind digital signatures, and the hashing that underlies blockchains — is built on mathematical problems that are easy to check but hard for a classical computer to reverse. A large enough, fault-tolerant quantum computer changes that: Shor’s algorithm can factor large integers and compute discrete logarithms in polynomial time, which breaks RSA and elliptic-curve cryptography outright. The catch has always been that such a machine does not exist yet — but the threat is not the day it exists; it is the day anyone records today’s encrypted traffic to decrypt it later.
IT security: the “harvest now, decrypt later” problem
The most urgent consequence for IT security is retroactive: encrypted data captured today can be stored and decrypted once a cryptographically relevant quantum computer arrives, a threat known as “harvest now, decrypt later.” For secrets with a long shelf life — medical records, state communications, financial ledgers — that means confidentiality can break years after the fact. The defence is post-quantum cryptography (PQC): algorithms such as CRYSTALS-Kyber and CRYSTALS-Dilithium, now standardised by NIST, and the practical discipline of running TLS 1.3 with hybrid key exchange while the ecosystem migrates.
Blockchains: signatures are the weak point
Blockchains are often described as “post-quantum” because SHA-256 is believed to remain quantum-resistant. That is a half-truth. The integrity of the chain relies on hashing, but the ownership of funds relies on digital signatures — ECDSA (secp256k1) for Bitcoin, Ed25519 and others for many chains. Those signature schemes are exactly what Shor’s algorithm breaks. A quantum attacker who could derive a private key from a public key could spend funds that are not theirs, which is why the ecosystem is moving toward quantum-resistant signature schemes and why the risk is concentrated on addresses whose public keys are exposed, not just the hash of them.
Banking and the world of money
Banks and payment systems run on a fabric of public-key encryption: card networks, SWIFT message integrity, digital identity, and increasingly the settlement rails of central-bank digital currencies. A quantum break of ECC/RSA would not simply be a software patch — it would be a wholesale key migration touching every endpoint and hardware security module. Regulators are already pressing for cryptographic agility and PQC migration roadmaps, and the financial sector’s lead time is measured in years, not weeks. The institutions that inventory their cryptography now — knowing which keys protect what, and how long the data must stay secret — are the ones that will migrate without a crisis.
Conclusion: prepare for the transition, not the apocalypse
Quantum computing is not a reason to abandon blockchains or banking; it is a reason to treat cryptography as an inventory you manage, not a given you inherit. The practical agenda is the same across sectors: adopt hybrid and post-quantum algorithms, rotate long-lived secrets, and assume that anything encrypted today may be read tomorrow. The companies that act on that assumption early will turn what could have been a security catastrophe into a routine migration.
