Peter Shor's 1994 quantum algorithm demonstrated that quantum computers could factor large numbers exponentially faster than classical computers. This capability threatens RSA encryption, the cryptographic standard protecting everything from banking systems to classified government communications. Yet Shor himself remains remarkably sanguine about the prospect of quantum computers breaking internet security.
In an interview with New Scientist's Karmela Padavic-Callaghan, Shor explained his measured perspective on what cryptographers call "Q-day" — when quantum computers become powerful enough to crack current encryption. The algorithm's theoretical power rests on quantum superposition and entanglement, allowing quantum computers to explore multiple solution paths simultaneously. Classical computers, by contrast, must test potential factors sequentially, making the task computationally infeasible for the massive numbers used in encryption.
Shor's relative calm stems from recognition that the timeline for practical quantum computers remains uncertain. Building machines with thousands of stable, error-corrected qubits requires solving fundamental engineering challenges that persist today. Current quantum computers contain dozens to hundreds of qubits, many plagued by decoherence and error rates that limit computation.
The cryptography community has not remained idle. The National Institute of Standards and Technology finalized post-quantum cryptographic standards in 2022, developing algorithms resistant to quantum attack. Organizations now face pressure to migrate to these new encryption methods before quantum computers mature. This transition, known as "crypto-agility," requires updating legacy systems worldwide — a logistical challenge of staggering proportions.
Shor's invention catalyzed quantum computing's emergence as a field and forced governments and tech companies to confront encryption's vulnerability. His algorithm remains theoretically unmatched in demonstrating quantum computers' potential advantage over classical systems. Whether his optimism proves justified depends entirely on the pace of quantum hardware development over the next decade. Researchers at