Europol named wallet keys as crypto's main quantum exposure, a risk that covers the 6.04 million bitcoin Glassnode counts with public keys already on-chain. Its report says those coins can be protected only by moving them before an attack, so the length of the migration queue sets the deadline for custodians.
Perspective Coverage
8 publishers
- Builder
- Builder 42%
- Operator
- Operator 26%
- Investor
- Investor 32%
Reality
- Evidence72
- Adoption18
- Hype gap+8
- Incentives35
- Confidence68
GAO finds none of 24 federal agencies has done all three post-quantum basics
None of 24 federal agencies reviewed by the US GAO has fully completed all three post-quantum basics of inventory, funding and testing. Europol's guidance a day later puts the risk on data harvested now and decrypted whenever a capable quantum computer appears.
Reality
- Evidence58
- Adoption15
- Hype gap+10
- Incentives
- Not scored
- Confidence52
Forescout found post-quantum-capable SSH on 6% of IoMT and 16% of medical OT devices in a 2.5 million-device study of over 50 healthcare organizations. With long device lifecycles and few upgrade paths, hospitals are left planning around segmentation.
Reality
- Evidence60
- Adoption10
- Hype gap+20
- Incentives
- Not scored
- Confidence58
The G7 Cyber Security Working Group's June call to action says the quantum threat is off the radar and under-resourced at most organizations, and it hands CISOs the wording to fund a cryptographic inventory this cycle.
Perspective Coverage
5 publishers
- Builder
- Builder 22%
- Operator
- Operator 55%
- Investor
- Investor 23%
Reality
- Evidence72
- Adoption30
- Hype gap+10
- Incentives60
- Confidence68
buildOne report1 publisher Hybrid ML-KEM key exchange adds about 1,600 bytes to every fresh TLS handshake
AWS and Microsoft are already shipping ML-KEM hybrid groups, so the question for platform teams is whether the old proxy, SDK and appliance in the path still complete a handshake that got bigger.
Reality
- Evidence40
- Adoption55
- Hype gap+10
- Incentives20
- Confidence45
Google's own post-quantum deadline runs two years ahead of the NSA's target
Google said faster progress in quantum hardware and error correction moved its migration to 2029. A Caltech, Berkeley and Oratomic paper published the same month put the qubits needed for Shor's algorithm as low as 10,000.
Reality
- Evidence38
- Adoption20
- Hype gap+38
- Incentives72
- Confidence45
NIST sets 2030 and 2035 retirement dates for quantum-vulnerable algorithms, raising stakes for banks
Post-quantum standards were finalised in August 2024, and NIST means to phase out most quantum-vulnerable algorithms by 2035. For banks the harder problem is finding every place RSA and ECC are written into application code.
Reality
- Evidence46
- Adoption32
- Hype gap+24
- Incentives64
- Confidence50
buildOne report1 publisher JDK 24 relocates the post-quantum blocker to your key custody plumbing
InfoQ's Spring Boot walkthrough puts ML-KEM and ML-DSA behind the standard JCE on JDK 24. That retires the library argument and leaves the migration gated on where a private key lives and how long your service tokens do.
Reality
- Evidence44
- Adoption22
- Hype gap+24
- Incentives32
- Confidence41
Harvest now, decrypt soon: post-quantum migration is a funded program, not a research topic
A Forbes Tech Council argument for urgency leans on benchmarks that were never factoring runs. The part of it that survives scrutiny is still enough to justify the spend.
Reality
- Evidence38
- Adoption36
- Hype gap+42
- Incentives78
- Confidence48
Three-quarters claim a crypto inventory. Nearly half have nobody to hand it to.
Axiad's survey finds 75% of enterprises say they maintain a live cryptographic inventory while 46% have no single owner for post-quantum migration. That is an org chart problem, not a math problem.
Reality
- Evidence34
- Adoption28
- Hype gap+28
- Incentives74
- Confidence45