Q-Day a world and banking revolution
Imagine a world in which the encryption protecting a bank transfer, a customer’s identity or a multi-billion-dollar financial transaction suddenly becomes obsolete. No stolen password, no conventional cyberattack and no human error would be required. The threat would come from a machine capable of solving mathematical problems that today’s computers are simply unable to handle. This is the scenario behind Q-Day, which defines the moment when a sufficiently powerful quantum computer could break some of the cryptographic systems that currently protect the digital economy.
Quantum computing represents a fundamentally different approach to computation. In fact Classical computers process information through bits, represented as 0 or 1. Quantum computers use qubits, which exploit quantum-mechanical properties such as superposition and entanglement to solve problems in a much quicker exponential way. This allows certain classes of problems to be processed in ways that can offer major advantages over classical computing, overcoming also the power of AI. One of the most significant threats comes from Shor’s algorithm, which could efficiently solve the mathematical problems underlying widely used public-key cryptography, including RSA and elliptic-curve cryptography.
The exact arrival date of Q-Day remains uncertain, but is approaching as more and more societies such as IBM are investing a lot on research and development. Yet this uncertainty is precisely what makes preparation difficult. A technological breakthrough could accelerate existing roadmaps, potentially making assumptions about how much time organisations have to migrate their infrastructure quickly outdated. The risk is particularly serious because sensitive information stolen today could still be valuable years from now. In a so-called “harvest now, decrypt later” attack, adversaries can collect encrypted data today and wait for sufficiently powerful quantum computers to decrypt it in the future. HSBC has already demonstrated a quantum-safe system designed specifically to protect tokenised gold against this type of scenario, by allowing a possible hacker to enter but not to exit from the system.
For banks, the consequences could extend far beyond the loss of confidential information. Financial institutions rely on cryptography to authenticate customers, secure communications, protect payment systems, validate digital signatures and guarantee the integrity of transactions. If vulnerable cryptographic infrastructure were compromised, attackers could potentially impersonate legitimate entities or undermine the mechanisms used to verify transactions.
The financial sector is therefore beginning a long transition towards post-quantum cryptography (PQC). In August 2024, the U.S. National Institute of Standards and Technology (NIST) finalised three standards: ML-KEM for key establishment, and ML-DSA and SLH-DSA for digital signatures. NIST now recommends that organisations begin migrating systems towards quantum-resistant cryptography, with quantum-vulnerable algorithms ultimately being phased out of its standards.
Major financial institutions are already taking concrete measures.
Deutsche Bank has introduced cryptographic agility, allowing its security architecture to adapt as cryptographic standards and threats evolve. This concept may become crucial. Banks cannot simply replace one algorithm overnight, it would take years cause their infrastructures contain decades of legacy systems, third-party software, payment networks and interconnected services.
Q-Day, in this sense, is more than a technological milestone. It represents a deadline whose exact date is unknown, that will forever change our life prospectives and frontiers more than AI has done until now. For the financial industry in particular the challenge is not to predict precisely when quantum computers will become powerful enough to break current encryption, but to ensure that when that day arrives, the infrastructure protecting the global financial system is already ready for it in order to prevent a total collapse of the global banking system and economy.
--september 2026-