Q-Day

What Is Q-Day?

Much of the internet’s security, including key exchange, authentication, and digital signatures, relies on the assumption that certain mathematical problems are infeasible to solve. Q-Day is the name given to the hypothetical point at which quantum computers grow powerful enough to invalidate the security of widely used cryptographic assumptions.

More specifically, Q-Day describes the capability threshold at which a cryptographically relevant quantum computer (CRQC) could run Shor’s algorithm efficiently enough to crack RSA and elliptic curve cryptography (ECC). In practice, Blockchain networks like Bitcoin and Ethereum rely heavily on ECC, and a functional CRQC could derive private keys from public keys that have been revealed on-chain and forge valid transaction signatures. 

Wallet addresses, which are typically hashes of public keys, offer some protection until a public key is revealed. Still, funds tied to addresses that have already signed transactions become vulnerable once those public keys are revealed. Hashing algorithms face a separate, weaker threat from Grover’s algorithm, often mitigated by increasing key sizes rather than replacing the algorithm entirely.

Expert timelines for when Q-Day may happen vary widely, from the 2030s to decades further out, and some researchers avoid specific estimates altogether, given the uncertainty in scaling quantum hardware.

Why Q-Day Is Already a Problem

The most immediate danger is a strategy called Harvest Now, Decrypt Later (HNDL). Attackers capture and store encrypted data today, then decrypt it once quantum capability matures. For data with long confidentiality lifespans, like encrypted communications, stored records, or identity data, the exposure window starts the moment that data is captured, not the moment a CRQC exists.