Is Quantum Computing Opening a Window for Cryptographic Security? How IBM’s Executive Order Is Reshaping the Path to Quantum-Resistant Migration

Markets
Updated: 06/26/2026 08:43

June 22, 2026 — President Trump signed two executive orders on quantum computing at the White House, officially launching the U.S. "Quantum Surge" initiative. The first order mandates the deployment of a quantum computer with scientific research capabilities by 2028 and calls for progress in quantum sensing and quantum networking within five years. The second order focuses on cryptographic security, moving up the federal agencies’ deadline for migrating to post-quantum cryptography (PQC) to 2031, with high-value data systems required to complete the transition by 2030.

IBM emerged as the biggest beneficiary of these policy moves. Of the $2 billion quantum technology funding program previously announced by the U.S. Department of Commerce, IBM received about $1 billion to build Anderon—the nation’s first dedicated quantum chip foundry. IBM CEO Arvind Krishna attended the signing ceremony, where Trump publicly praised his leadership. That evening, JPMorgan Chase raised IBM’s price target from $270 to $291 and upgraded its rating from neutral to overweight. IBM’s share price rose 3.26% in pre-market trading.

For the crypto industry, the significance of these executive orders goes far beyond short-term geopolitical and capital market fluctuations. They mark the transition of quantum computing from laboratory research to a fast track driven by national policy, and they set a clear timeline for blockchain ecosystems that rely on elliptic curve cryptography (ECC) and RSA encryption. This article offers a structured analysis across three dimensions: the practical impact of the policies, a technical assessment of quantum threats, and the crypto industry’s response strategies.

Policy Core: Cryptographic Security Implications of the Two Executive Orders

The first executive order, titled "Ushering in the Next Frontier of Quantum Innovation," aims to establish the "Quantum Application Development and Discovery Science Program" (QC-ADDS), directing the Department of Energy to deliver a quantum computer with scientific research value by 2028. The order also instructs the heads of the Department of Commerce, Department of Energy, National Science Foundation, and NASA to jointly develop a five-year "Quantum Sensing and Networking Advancement Plan."

The second executive order, "Defending Against Advanced Cryptographic Attacks to Secure National Security," directly addresses the core concerns of the crypto industry. It states: "Ongoing cyber activities against our nation pose the risk that adversaries are collecting U.S. information now to decrypt it later when large-scale quantum computers become operational." This language formally incorporates the "Harvest Now, Decrypt Later" (HNDL) attack model into the national policy framework. The order requires the Office of Management and Budget (OMB) and the National Cyber Director to "lead an accelerated, nationwide migration to post-quantum cryptography, ensuring the security of the nation and its data as quantum technology evolves."

These two executive orders are not isolated measures. In May 2026, the Department of Commerce announced $2 billion in grants and equity investments from the CHIPS and Science Act for nine quantum companies—the largest single quantum R&D investment in U.S. history. IBM received about $1 billion to build the Anderon quantum chip foundry and will invest an additional $1 billion of its own. GlobalFoundries received $375 million, while D-Wave Quantum, Rigetti Computing, and Infleqtion each received about $100 million. The government’s use of equity investments marks a departure from traditional federal research funding models.

From a policy perspective, these two executive orders form a complete feedback loop: the front end accelerates technological breakthroughs with the 2028 quantum computer goal, while the back end pushes cryptographic system upgrades by setting 2031 as the PQC migration deadline. For the crypto industry, this means quantum computing is no longer a distant narrative—it is now part of a national policy agenda with a clear timeline and resource backing.

Technical Assessment of the Quantum Threat: Bridging Theory and Engineering

The threat quantum computing poses to cryptographic systems is often summarized as "can break encryption algorithms," but this glosses over the fundamental differences between two quantum algorithms.

Shor’s Algorithm targets integer factorization and discrete logarithm problems in public-key cryptography, directly impacting ECDSA and Schnorr signatures—the core mechanisms authorizing Bitcoin and other major cryptocurrencies. A fault-tolerant quantum computer with enough logical qubits running Shor’s Algorithm could, in theory, reverse-engineer private keys from publicly available on-chain public keys.

Grover’s Algorithm targets SHA-256 hash functions, theoretically reducing the effective brute-force workload from 2²⁵⁶ to 2¹²⁸. However, this optimization remains impractical in engineering terms, and the threat to Proof-of-Work (PoW) mining is offset by quantum error correction overhead and the massive parallel computing power of existing ASIC miners.

The key issue is the gap between "in theory" and "in engineering." On March 31, 2026, Google released a 57-page white paper showing that the resources needed for a quantum computer to break 256-bit elliptic curve discrete logarithm problems are about an order of magnitude lower than previously estimated—roughly 500,000 physical qubits could break it in minutes. This finding led Google to disclose the results via zero-knowledge proofs rather than publishing the specific attack algorithm.

However, there is a massive error correction overhead between physical qubits and usable logical qubits. In a 2026 report, Bernstein noted that scaling from today’s dozens of logical qubits to the thousands needed to threaten ECDSA "is a multi-dimensional engineering challenge requiring years of breakthrough progress." In January 2026, Amazon’s CTO cited research showing that the number of quantum bits needed to break 2,048-bit RSA encryption had dropped from 20 million (estimated six years ago) to under 1 million—a 95% reduction. While significant, this is still far from practical engineering realization.

Academia offers a more cautious probability distribution for the emergence of "cryptographically relevant quantum computers" (CRQC). The "Quantum Horizon" research paper, using a Monte Carlo model that incorporates hardware scaling, resource requirement reductions, fault tolerance delays, and expert surveys, found the following distribution: about a 1-in-6 chance of CRQC by 2035, nearly 30% by 2040, and around 60% by 2050.

Exposure in the Crypto Industry: Which Assets Are Truly at Risk?

Quantum risk is distributed very unevenly across the Bitcoin network—not all holdings face the same level of threat.

By address type, risk forms a pyramid:

P2PK (Pay-to-Public-Key) addresses: Public keys are directly exposed on-chain without hash protection, making these the most vulnerable. This category includes about 1.7 million BTC, roughly 8% of total supply, including Satoshi’s early holdings of about 1.1 million BTC.

P2PKH (Pay-to-Public-Key-Hash) addresses: Public keys are protected by a hash and only exposed when the assets are spent. As long as an address has never had an outgoing transaction, its public key remains private, giving quantum attackers nothing to target.

P2SH (Pay-to-Script-Hash) and Taproot addresses: These also benefit from the isolation effect of hash protection.

According to research estimates from June 2026, approximately 6 million BTC on the Bitcoin network face quantum exposure risk, with about 2.3 million considered "unmitigable risk." Other analyses suggest that up to 6.9 million BTC could be at risk, including legacy wallets and Taproot outputs—the latter accounted for over 21% of all Bitcoin transactions as of 2025. On Ethereum, about 50% to 65% of ETH resides in accounts with exposed keys, but these accounts can avoid risk by adopting post-quantum signatures.

A more subtle structural risk comes from the "Harvest Now, Decrypt Later" attack model. Both the NSA and the UK’s National Cyber Security Centre have identified HNDL as a present threat. For Bitcoin, transaction data is already public, so the "harvest" cost is virtually zero. This means that once CRQC becomes a reality at some future point, all addresses with previously exposed public keys will be vulnerable to retrospective attacks. This is not a distant theoretical concern—it is already part of some institutional risk models.

Market Response and Industry Actions

Following the executive orders, the crypto market displayed a "long-term narrative, short-term sentiment divergence" pattern.

As of June 26, 2026, Bitcoin (BTC) was priced at $60,275.5, down 2.47% over 24 hours, -7.63% over 7 days, -10.73% over 30 days, and -33.74% over the past year, with a market cap of about $1.2 trillion. Market sentiment remained neutral. Whether quantum computing, as a long-term structural risk, will become a short-term market narrative in the current price environment remains to be seen.

Industry responses are accelerating. In May 2026, NIST concluded an 18-month second-round evaluation, advancing nine candidate algorithms for PQC digital signature standardization to the third round. NIST has finalized three PQC algorithms, with two more under review, and plans to phase out quantum-vulnerable algorithms from its standards by 2035.

In June 2026, Coinbase convened its Cryptography Advisory Board—members include Scott Aaronson (UT Austin), Dan Boneh (Stanford), and Justin Drake (Ethereum Foundation)—which concluded that quantum computers do not yet threaten blockchains, but the Bitcoin community should start technical planning for post-quantum signatures immediately. The board noted that Bitcoin’s risk is concentrated in early addresses, and that the main constraint on migration is governance, not technology.

Bitcoin Improvement Proposal BIP-360 was assigned a number and entered testnet in February 2026, introducing a new post-quantum output type. This progress shows the Bitcoin community is beginning to address quantum threats at the protocol level, though moving from testnet to mainnet activation will require a lengthy consensus process.

In June 2026, BlackRock released a report titled "Quantum Computing and Blockchain," warning that future quantum breakthroughs could threaten the cryptography securing Bitcoin and Ethereum. BlackRock had already listed quantum computing as a risk factor in its IBIT prospectus.

Conclusion

The true significance of the IBM quantum computing executive orders lies not in how much government funding or share price gains they bring to a tech company, but in how they propel quantum computing from academic preprints and lab demos into a policy-driven fast lane.

The 2028 quantum computer goal and the 2031 PQC migration deadline set a clear timeline for the crypto industry. This window—roughly five to ten years—aligns with mid-term academic forecasts for the emergence of CRQC. Regardless of whether quantum computers reach the level to threaten existing cryptosystems by 2028 or 2031, the policy itself has changed the game: federal agencies, financial institutions, and critical infrastructure operators must complete PQC migration within the prescribed timeframe, driving a generational upgrade of cryptographic infrastructure. As one of the largest applications of public-key cryptography, the crypto industry cannot remain on the sidelines.

For the crypto industry, the real challenge is not that quantum computers will "break private keys tomorrow," but how a global, decentralized network can upgrade its foundational cryptographic infrastructure under distributed governance. The progress of BIP-360 on testnet, the acceleration of NIST standardization, and major institutions’ risk disclosures all indicate the industry has entered a "preparation phase." The length and quality of this phase will determine whether the crypto ecosystem can uphold its core promise—trustless security—in the quantum era.

The policy window is now open. The next test will be the industry’s ability to reach consensus and execute.

FAQ

Q: What are the specifics of the IBM Quantum Computing Executive Orders of 2026?

On June 22, 2026, President Trump signed two executive orders: one mandates the construction of a research-grade quantum computer by 2028; the other requires federal agencies to complete migration to post-quantum cryptography by 2031. IBM received $1 billion in CHIPS Act funding to build the United States’ first quantum chip foundry, Anderon.

Q: When will quantum computing pose a real threat to Bitcoin?

Academic research suggests there’s about a 1-in-6 chance of CRQC by 2035, nearly 30% by 2040, and around 60% by 2050. Google’s March 2026 white paper indicated that about 500,000 physical qubits could break ECC-256 in minutes. The industry consensus is that it will take another 10 to 20 years for quantum computers to reach a threatening level.

Q: How is Bitcoin responding to the quantum threat?

The Bitcoin community has begun technical preparations. BIP-360 entered testnet in February 2026, introducing a post-quantum output type. The Coinbase Cryptography Advisory Board recommends starting post-quantum signature planning immediately. The main constraint on migration is governance, not technology.

Q: What is a "Harvest Now, Decrypt Later" attack?

Attackers capture encrypted data today, then decrypt it in the future once quantum computers mature. The NSA and UK National Cyber Security Centre have already identified this as a current threat. Since Bitcoin transaction data is public, the "harvesting" cost is nearly zero, meaning all addresses with previously exposed public keys will face retrospective risk.

Q: What’s the status of NIST’s post-quantum cryptography standards?

NIST has finalized three PQC algorithms, with two more under review. In May 2026, nine digital signature algorithm candidates advanced to the third round of evaluation. NIST plans to remove quantum-vulnerable algorithms from its standards by 2035.

The content herein does not constitute any offer, solicitation, or recommendation. You should always seek independent professional advice before making any investment decisions. Please note that Gate may restrict or prohibit the use of all or a portion of the Services from Restricted Locations. For more information, please read the User Agreement
Like the Content