Live data from Hacker News

Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

arxiv.org

11–20 of 146 posts

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#11
post #9

Quantum computers of this scale are probably 5-15 years out. Basically this is a warning that if you have secrets that should still be kept secret over that timeframe, you should not be using RSA today.

I'd be willing to bet a lot that it's not 5 years, and am still quite confident it's not 15.

Of course nobody knows, but these things are still very far from anything that is running today.

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#12
This paper basically explores a hypothetical scenario where scaling quantum memory ends up being cheaper than scaling computational qubits. The title (or abstract) unfortunately does not mention the quantum memory requirements at n=2048 explicitly.

For factoring 2048 RSA integers, the technique proposed in the paper would require ~430 million memory qubits (see the table at top of page 16).

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#13
post #9

Quantum computers of this scale are probably 5-15 years out. Basically this is a warning that if you have secrets that should still be kept secret over that timeframe, you should not be using RSA today.

Even if it was, 177days for cracking your password with the most advanced technology that exists in the world, still means you have some very powerful enemies. Practically you don't need to think about it.

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#15
post #11
post #9

Quantum computers of this scale are probably 5-15 years out. Basically this is a warning that if you have secrets that should still be kept secret over that timeframe, you should not be using RSA today.

I'd be willing to bet a lot that it's not 5 years, and am still quite confident it's not 15. Of course nobody knows, but these things are still very far from anything that is running today.

At this rate, maybe the first commercial Fusion plants will have asymmetric quantum encryption securing their management portal.

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#16

Earlier quoted context omitted.

Do I understand correctly, that largest quantum computer that exists today contains less than 100 qubits? Also it does not seem that there's an exponential grow in this area: https://www.statista.com/statistics/993634/quantum-computers... . They hit the wall in 2017. We should be safe for now :)

IBM has 1000 qubits on their roadmap by 2023 [1]. I'm interested to see how that goes, and what we can learn from it about scaling up these systems into the thousands of qubits. Edit: for anyone interested in learning more about quantum computation, I have a list of resources on my website [2]. [1] https://www.ibm.com/blogs/research/2020/09/ibm-quantum-roadm... [2] https://cameronperot.com/resources/#quantum-physics

Since I didn't see it mentioned, I assume those are 1000 noisy qubits, so they'll require error correction. I wonder how many ideal qubits they are equivalent to.

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#17
post #11
post #9

Quantum computers of this scale are probably 5-15 years out. Basically this is a warning that if you have secrets that should still be kept secret over that timeframe, you should not be using RSA today.

I'd be willing to bet a lot that it's not 5 years, and am still quite confident it's not 15. Of course nobody knows, but these things are still very far from anything that is running today.

But even if I agree that it's almost impossible in 5 years it's better to be cautious and assume it could be broken in 5. And there's also the fact it could be broken by some governments long before anyone finds out I guess.

Re: Factoring 2048 RSA integers in 177 days with 13436 qubits and a multimode memory

#19
post #13
post #9

Quantum computers of this scale are probably 5-15 years out. Basically this is a warning that if you have secrets that should still be kept secret over that timeframe, you should not be using RSA today.

Even if it was, 177days for cracking your password with the most advanced technology that exists in the world, still means you have some very powerful enemies. Practically you don't need to think about it.

I.e. you can solve it by rotating your keys/certificates every 90 days, like the expiry term given by Letsencrypt.
Post reply on HN