Quantum Threat Timeline: Is Gartner Behind Schedule?

Gartner’s prediction that quantum computing would break RSA-2048 encryption by 2029 is looking increasingly optimistic, and the threat may be arriving earlier than the forecast suggested. This article examines the current state of quantum computing, the realistic timeline for cryptographically relevant quantum computers (CRQCs), and what it means for your data security strategy.

Formula

The calculator uses two simple formulas:

• Years until target = Target year − Current year (2025). This gives a straightforward countdown.
• Estimated probability of a CRQC by target year = 100 / (1 + e^(−0.15 × (target year − 2030))). This is a logistic growth model, commonly used for technology adoption curves. It assumes a 50% probability around 2030, with the probability rising steeply before and after that date. The 0.15 factor controls the steepness of the curve.

Variables: t = target year (input), years_left = years from 2025 to target, prob = estimated probability (%).

Worked Example

Using the default target year of 2029:

1. Years left = 2029 − 2025 = 4 years.
2. Probability = 100 / (1 + e^(−0.15 × (2029 − 2030))) = 100 / (1 + e^(0.15)) ≈ 100 / (1 + 1.1618) ≈ 100 / 2.1618 ≈ 46.3%.

So the calculator estimates a ~46% chance of a cryptographically relevant quantum computer by 2029, and 4 years remain from 2025.

Background: What Gartner Predicted

In 2019, Gartner predicted that quantum computing would break RSA-2048 (a widely used public-key encryption algorithm) by 2029. This forecast was based on extrapolating the pace of qubit count growth and error correction improvements. However, many experts now believe this timeline is too conservative. The rapid progress in quantum hardware, combined with the development of new algorithms that require fewer qubits, suggests the threat could materialize sooner.

How Quantum Computing Threatens Encryption

Modern encryption relies on the difficulty of certain mathematical problems, such as factoring large numbers (RSA) or computing discrete logarithms (ECC). Quantum computers, using Shor’s algorithm, can solve these problems exponentially faster than classical computers. A sufficiently powerful quantum computer could decrypt intercepted data, forge digital signatures, and undermine the security of the internet.

Current State of Quantum Hardware

As of 2025, the largest quantum processors have around 1,000 physical qubits, but they are still noisy and error-prone. To break RSA-2048, estimates suggest needing roughly 20 million physical qubits (or about 4,000 logical qubits with error correction). Progress is being made in error correction and qubit connectivity, but we are still several orders of magnitude away. However, recent advances in neutral-atom and photonic quantum computers have accelerated the pace.

Why the Threat May Arrive Earlier Than Expected

Several factors could shorten the timeline:

• Algorithmic improvements: New factoring algorithms that reduce qubit requirements.
• Fault-tolerant breakthroughs: Better error correction codes that lower overhead.
• Hybrid approaches: Combining classical and quantum techniques to speed up attacks.
• Harvest now, decrypt later: Attackers already collecting encrypted data to decrypt once quantum computers are available.

Common Misconceptions

One common misconception is that quantum computers will replace classical computers. They won’t; they are specialized for certain problems. Another is that all encryption is vulnerable. Symmetric encryption (like AES) is less affected, and quantum-resistant algorithms are already being standardized. The real urgency is with public-key cryptography used in TLS, SSH, and digital signatures.

How to Prepare

Organizations should start preparing now, even if the threat is a few years away:

1. Inventory all cryptographic assets and identify which use vulnerable public-key algorithms.
2. Follow NIST’s post-quantum cryptography standards (finalized in 2024) and plan migration.
3. Implement crypto-agility so you can swap algorithms quickly.
4. Monitor quantum computing developments and adjust your risk assessment annually.

Frequently Asked Questions

When will quantum computers break encryption?

Most experts estimate a 10-30% chance of a CRQC by 2030, and a 50-70% chance by 2035. Gartner’s 2029 prediction is on the optimistic side, but the threat is real and could arrive sooner if breakthroughs continue.

Is my data safe now?

If you use standard encryption (TLS, AES), your data is safe from current quantum attacks. However, if an attacker records your encrypted traffic today, they could decrypt it later once a quantum computer is available. This is the “harvest now, decrypt later” risk.

What is the difference between a qubit and a logical qubit?

A qubit is the basic unit of quantum information, but physical qubits are noisy. A logical qubit is an error-corrected qubit made from many physical qubits, and it is reliable enough for computation. Breaking RSA-2048 requires thousands of logical qubits, which translates to millions of physical qubits.

What is post-quantum cryptography?

Post-quantum cryptography (PQC) refers to encryption algorithms believed to be secure against quantum attacks. NIST standardized several PQC algorithms in 2024, including CRYSTALS-Kyber for key exchange and CRYSTALS-Dilithium for signatures. These are designed to run on classical computers but resist quantum attacks.

Should I wait for the threat to materialize before acting?

No. Migrating to post-quantum cryptography takes years, especially for large systems. Starting early reduces the risk of being caught unprepared. The cost of migration is far lower than the cost of a data breach.

Does the calculator give a definitive prediction?

No. The probability is a rough estimate based on a simple logistic model. Real-world timelines depend on many unpredictable factors, including funding, physics breakthroughs, and engineering progress. Use it as a planning tool, not a precise forecast.

Related

• AI in Transportation: 35 Deployments, What’s Proven
• Galaxy S7 & S7 Edge: Fix Disappeared Gallery Pictures
• Coding Agent Permissions: What to Allow & When

in t | Target year | year | 2029 | 2025 | 2100
out years_left | Years until target | years | t - 2025 | 0
out prob | Estimated probability of CRQC by target | % | 100 / (1 + exp(-0.15 * (t - 2030))) * 100 | 0