MilestoneTheory & algorithmsConfirmed
Gidney and Ekerå estimate 20 million qubits could break RSA-2048 in eight hours
May 23, 2019
Craig Gidney of Google and Martin Ekerå of Sweden's KTH estimate that an error-corrected quantum computer with about 20 million noisy physical qubits could factor a 2048-bit RSA key, a widely used encryption standard, in about eight hours, assuming hardware error rates of 0.1%.
Why it matters
MIT Technology Review contrasted it with a 2015 estimate of a billion qubits for the same job, and said organizations relying on such encryption for long-lived secrets should start worrying.
Craig Gidney · Martin Ekerå · Google
Related
Sources (3)
-
arXiv (Gidney and Ekerå)
How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits
“How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits”
-
Quantum
How to factor 2048 bit RSA integers in 8 hours using 20 million noisy qubits
“We significantly reduce the cost of factoring integers and computing discrete logarithms in finite fields on a quantum computer”
-
MIT Technology Review
How a quantum computer could break 2048-bit RSA encryption in 8 hours
“Now Gidney and Ekerå have shown how a quantum computer could do the calculation with just 20 million qubits. Indeed, they show that such a device would take just eight hours to complete the calculation.”
Each quote above was checked automatically against the original page. Added Oct 15, 2026. Spotted an error? Tell us and we will review it.