Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years.

That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

https://words.filippo.io/crqc-timeline/

A Cryptography Engineer’s Perspective on Quantum Computing Timelines

The risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.

@filippo The references generally discuss the matter in form of theoretical models. Having an engineers theory v practice mindset, I question whether there is any correlation between advances in these theoretical models and actual, physical quantum computers that dont’t solely exist in highly controlled lab enviroments?