Quantum computers need just 10,000 qubits to break the most secure encryption, scientists warn

11,961 qubits: new preprint finds Shor’s algorithm could be solvable with ~11,961 qubits and that architectures of ~10,000–26,000 qubits could break ECC-256 within ~10 days and RSA-2048 in as little as seven months (26,000 qubits) or under three years (11k–14k); a parallelized ~102,000‑qubit design could crack RSA-2048 in ~97 days. The shift reflects advances in quantum error correction and neutral-atom qubits that may cut physical‑to‑logical qubit overhead (potentially to ~5 physical qubits per logical qubit), implying material acceleration of risks to current public‑key infrastructure and urgent need to migrate to post‑quantum cryptography (industry guidance suggests <3 years).

Analysis

The immediate market effect is not a binary “quantum wins / classical loses” outcome but a multi-year commercialization and compliance wave that creates both a spending boom and a near-term cost shock for incumbents. Expect a front-loaded professional services and migration market (identity/key lifecycle, HSMs, certificate churn) that favors cloud operators with deep enterprise relationships and managed-security offerings, but also forces them to absorb multi-quarter integration and support costs.

Neutral-atom and precision-optics scaling shifts the supplier map away from conventional node-dependent semiconductor vendors toward specialist photonics, vacuum systems, and precision-laser suppliers; those supply-chain winners are currently under-owned by the large-cap cloud/tech names, so revenue capture will be indirect and slow. For Madison Avenue-sized cloud players, the strategic lever is productizing migration (sticky revenue, high margins) vs. absorbing complexity for large legacy customers (diluted margins, slower ARPU expansion).

Key catalysts that will reprice winners/losers are standardization announcements, big-enterprise procurement commitments, and any credible public breach exploiting long-lived encrypted archives. Reversals are equally binary: a significant engineering setback in fault-tolerance or a breakthrough in algorithmic compression would push the migration horizon out and relieve near-term margin pressure. Timeframe: watch for measurable revenue/margin signals in 3–12 months tied to product launches and government/industry procurement guidance.

Key Decisions for Investors

• Go long GOOGL (12–18 month horizon): overweight Cloud/AI + security bundle. Rationale: faster monetization of managed migration and certificate/HSM services should drive incremental ARR and margin re-rating. Position sizing: 2–3% portfolio. Target: +15–25% if product-led migration wins; stop-loss: -8–10% if guidance/enterprise traction stalls.
• Relative-value pair — short MSFT / long GOOGL (3–9 month horizon): expect larger near-term margin headwinds at Microsoft from enterprise support and legacy-stack integration, while Alphabet can monetize cloud-native migration faster. Use options to limit downside: buy a 6–9 month MSFT put spread (small notional) and finance with a GOOGL call spread. Risk/reward: asymmetric — limited put-spread cost vs. 5–12% relative outperformance capture if view plays out.
• Tactical short on IBM (6–12 months): thesis is execution/capitalization mismatch between quantum R&D narrative and near-term revenue generation; purchase modest-sized put spread to limit maximum loss. Trade sizing: <2% portfolio. Target downside: 12–20% if revenue/cash conversion disappoints at next two quarters; capped risk via spread.
• Hedge: buy small notional protection across these names (index or individual puts) timed to major standardization events (NIST-like announcements) over the next 6–12 months. Cost justified as insurance—event risk is high-probability with outsized impact on valuation multiples.