Responsible quantum cryptanalysis

The same capability that might support recovery could enable theft, forged signatures, and attacks on systems that depend on public-key cryptography. The question is therefore not only whether quantum key recovery can be achieved. It is also who can use it, under what authority, and with what accountability.

Our position is that this work should develop inside institutions prepared to confront those questions before the capability becomes practical. Good intentions alone do not protect an asset owner or a vulnerable system. Research needs authorization, evidence, independent challenge, and clear limits on consequential actions.

Digital signatures authorize transactions and establish trust in software, identities, and records. A sufficiently capable quantum computer could undermine widely deployed signature systems based on mathematical problems that quantum algorithms can solve more efficiently. Some forms of public-key encryption and key exchange face a related threat to confidentiality.

These effects are different. Compromising a signing key can enable unauthorized instructions. Recovering a decryption or key-agreement secret can expose information. Bitcoin uses signatures to authorize spending; describing its risk as decrypting Bitcoin obscures the actual problem.

We want useful cryptanalytic capabilities to develop with safeguards before they are deployed by adversaries. That ambition does not create permission to take shortcuts with other people’s assets. Being earlier than an attacker would not by itself make an intervention legitimate or its consequences acceptable.

Responsible leadership means building both the technical competence and the institutional discipline to use a capability carefully. It includes publishing results that challenge our own assumptions, inviting criticism from people who do not benefit from our success, and being willing to stop an experiment or postpone a release.

There are real tensions here. Openness allows science to be checked, while unrestricted release can reduce the cost of misuse. A commercial company needs a durable business, while a recovery program may have duties to people who are not its customers. Secrecy can protect a sensitive finding, but it can also prevent scrutiny. Our framework should make these tensions visible and establish how decisions are challenged.

We do not assume that every difficult question has a technical answer. Network communities, affected owners, independent specialists, and appropriate public institutions have roles that a research company cannot claim for itself.

General mathematical research, controlled hardware experiments, target-specific key recovery, and asset transfers are different activities. They require different levels of authorization and review.

Our proposed operating boundary is to begin with synthetic keys, controlled challenges, and explicitly authorized experiments. Access to a quantum computer is permission to use that provider’s resources under its terms. It is not permission to recover a third party’s key.

Before any target-specific recovery, the program must establish who can authorize the work, what evidence supports that authority, which operations are permitted, and when work must stop. The scope must also cover data handling and any proposed disposition of recovered secrets or assets. An authorization to investigate must not silently become an authorization to transfer funds.

Public visibility does not resolve these questions. A key or balance being visible on a blockchain does not make it available for unrestricted experimentation. A successful recovery would demonstrate technical control, not prior ownership.