New paper from a team at Shanghai University outlines how a team there factored a 22-bit RSA integer on a #quantum computer (D-Wave's Advantage).

They reframed integer factoring as combinatorial optimization (which matches well with quantum annealing hardware) instead of Shor's period-finding approach. The previous best effort was 19 bits and was less efficient (more qubits per variable required).

The researchers also attacked some AES underlying algorithms including Present, Rectangle, and the Gift-64 block cipher.

(Notable context: Back in 2022 a different team in China claimed to have factored a 48-bit semiprime with a 10 qubit quantum computer, but that was later retracted.)

n.b., headline is clickbait but article is actually pretty good.

#PQC

https://www.earth.com/news/china-breaks-rsa-encryption-with-a-quantum-computer-threatening-global-data-security/

http://cjc.ict.ac.cn/online/onlinepaper/wc-202458160402.pdf

China breaks RSA encryption with a quantum computer, threatening global data security

Researchers in Shanghai break record by factoring 22-bit RSA key using quantum computing, threatening future cryptographic keys.

Earth.com

@darkuncle Does that improve the chances of us see a practical quantum computer soon?

#quantum_computing, #quantum_computer, #QuantumSystems

@welkin7 marginal improvement, but still an improvement. In the last six months we have seen hardware, algorithmic, and efficiency advances, as well as significant improvements in error correction and coherence times (plus new frontiers in distributed QC).

Schneier says "attacks always get better, they never get worse” ... I think the pace of advancement is going to continue to accelerate, and adopting quantum-resistant encryption is something people need to start on *now* not later. (Also because the time required just to inventory and asses all your installed cryptography will be years for most orgs.)

@darkuncle I like that phrase, "attacks always get better, they never get worse"

Can I propose an alternative? Do not look for quantum-resistant encryption. Rather replace the entire existing public-key-private key cryptography with something entirely new. If possible something based on quantum computing principles.

#quantum, #quantum_computing, #quantum_computer, #QuantumSystems

@welkin7 quantum key distribution would do that, but for now it requires specialized network hardware on both ends and is only suitable for carrier interlinks (metro area dark fiber, ground to orbit, etc.)

However, the world's first QKD-secured commercial network service went live in Paris a few weeks back due to a partnership with Orange and Toshiba: https://thequantuminsider.com/2025/06/11/orange-business-toshiba-partner-to-launch-commercial-quantum-safe-network-service-in-france/