When I taught my crypto course in the spring of 2016, I motivated the study of lattice-based cryptography by presenting the following spoofed NYTimes headline from four years into the future:
It seems like Google is trying to achieve this much earlier:
If and when a convincing “quantum supremacy” demonstration emerges, it would be interesting to see the effect on classical public key crypto systems. If communication needs to be kept secret for X years, and it takes Y years to transition to a new standard, then the transition away from RSA, Diffie-Hellman and Elliptic curves needs to start the moment we suspect that we are X+Y years from quantum computers large enough to break them, which is probably why the NSA already started this process.
(BTW the “president Trump” part in the spoofed headline was joke (or at least I thought so at the time): this was two months before Mr. Trump became the GOP presumptive nominee.)
Shoulda wrote President
PenceRyanwho knows?