Quantum computing, which utilizes qubits (bits that can exist at 0 and 1 simultaneously) to solve complex problems almost instantly, is positioned to become a defining technological advancement of the 21st century – affecting not only technology, but medicine, finance, supply chain logistics, and climate science. But while this technology has immense potential, it holds great risks, especially in the cybersecurity and banking department.

The Core Vulnerability

The core vulnerability is that our global financial system relies on digital locks and encryption techniques that can be easily broken by quantum computers, potentially exposing trillions of dollars and private transactions. This susceptibility stems from a fundamental reliance on mathematical systems that were not designed to last forever. Today, the global finance sector is secured by asymmetric encryption, or RSA, which protects data by using a “one-way math puzzle” where a bank multiplies two massive secret prime numbers together to create a public locking key. A classical supercomputer would take up to trillions of years to guess the original secret numbers and crack the lock, but with an approach called Shor’s Algorithm, quantum computers can solve these complex math problems almost instantly. Alongside RSA, banking infrastructure also relies heavily on SHA-256, a cryptographic hash function used to verify digital signatures and authenticate transactions, which is essentially a mathematical fingerprint that confirms data hasn’t been tampered with. Quantum computers threaten SHA-256 through Grover’s Algorithm, which would halve its effective security and make collision attacks more feasible, though SHA-256 would retain 128-bit security strength, still considered robust against near-term quantum threats.

The Threat: Harvest Now, Decrypt Later

Shor’s Algorithm is a quantum computing method that can crack standard digital security by finding prime factors of massive numbers exponentially quicker than a traditional supercomputer. This creates an impending threat called “Harvest Now, Decrypt Later,” where adversaries intercept and store encrypted long-tail financial data, such as 30-year mortgages and sovereign bond ledgers, intending to decrypt it when quantum computing technology becomes readily available. To counteract this threat, the banking sector must transition rapidly to Post-Quantum Cryptography before these defenses fail.

What Is Post-Quantum Cryptography?

But what exactly is Post-Quantum Cryptography? While the standard, widely used encryption of today relies on the computational difficulty of factoring huge prime numbers, Post-Quantum Cryptography shifts the encryption tactics to methods that will defend against attacks from quantum and classical computers alike. One of these methods is Lattice-Based Encryption. It works similar to an intricate, multi-dimensional maze, filled with trapdoors. This shield is a geometric digital grid containing intentional mathematical distortions in the coordinates to complicate decryption. When an individual sends their data, it is hidden in this maze with specific coordinates. Even for a quantum computer, finding an individual’s information within hundreds of dimensions and “errors” creates a unique challenge known as the Shortest Vector Problem. It requires sorting through a huge number of geometric possibilities simultaneously, a task that counteracts the unique processing ability of qubits. When an individual’s data arrives, the bank uses its private key to clear the errors and pinpoint the exact coordinates of the data, safely unlocking the information.

The Adoption Gap

However, among the finance and banking sector, Post-Quantum Cryptography has not yet become the norm. While major technology companies have rolled out PQC swiftly for their products, industry reports show that less than 5% of internal corporate banking networks are currently quantum-proof. Even though consumer apps for banks and corporations have been updated with this software, financial networks like SWIFT or internal bank mainframes are lagging.

Regulatory Deadlines and Standards

Key deadlines for PQC adaptation are only years away, with governments and studies reporting that by 2035, all commercial banks and civilian networks must be upgraded. The race to adopt PQC is an impending regulatory cliff. Because our current financial architecture is built on mathematical and strategic assumptions from the 1970s, the National Institute of Standard and Technology finalized strict new standards in August of 2024, like FIPS 203, to mandate industry-wide migration to PQC. The adaptation lag is no longer a distant concern. Since banks handle long-tail financial matters like private wealth portfolios and generational trust funds, cyber attacks using “Harvest Now, Decrypt Later” tactics compromise assets that have to stay secure for decades.

The Risk of Quantum Contagion

The risk of delaying this shift extends beyond hacking individual accounts; it threatens the stability of global capital through a phenomenon known as quantum contagion; that is, the rapid spread of financial instability and liquidity freezes across the global banking network resulting from a quantum computing attack on a core financial hub. A quantum contagion occurs when an adversary uses a quantum computer to break the cryptographic keys of a central clearinghouse, such as DTCC or Euroclear. If a bad force uses a quantum computer to compromise these core operators, they can forge authenticated digital signatures, inject “ghost” transactions, alter balances, and manipulate records. When central banks realize that their core verification methods can no longer be trusted, they would need to contain the fraud. To do this, central banks would be forced to immediately freeze transaction networks and halt capital networks, potentially triggering a global, systematic liquidity crisis.

Infrastructure Costs and Hardware Overhaul

Insulating these central systems against a quantum-enabled attack requires a major overhaul that goes beyond a simple software update, causing a capital expenditure shock on corporate balance sheets. Moving to lattice-based cryptography techniques requires a large performance tax on banking infrastructure due to the high byte size of lattice-based keys and digital signatures compared to standard RSA keys, which could cause latency and network congestion. To prevent rapid-fire payment rails from lagging, banks must execute a multi-billion dollar hardware cycle to write down mainframes and replace physical Hardware Security Modules. This mandatory technology reset will compress banking profit margins significantly over the coming decade.

Geopolitical Competition and the Security Gap

As individual firms content these operational reboot costs, the nations backing them are competing for a bigger prize: an unprecedented “security-gap” advantage. If a nation manages to create a functional, cryptanalytically relevant quantum computer even just two years before major financial networks complete the transition to Post-Quantum Cryptography, it may create big complications. By using stored data caches, the nation could read rival central bank communications, monitor private bond maneuvers, and track classified intellectual property. More destabilizing still, they could execute untraceable financial transfers, bypassing international trade sanctions. The question is: will the first country with a relevant quantum computer use it to secretly cheat the global markets and protect its central bank from sanctions, or will the fear of a total financial collapse initiate countries to sign a peace treaty revolving around quantum technology?

The Future of Financial Resilience

Traditional risk frameworks like Basel capital ratios are becoming obsolete in the face of quantum computing, as deep fiat reserves and gold vaults are almost useless if an attacker can invalidate a bank’s ledger verification system in hours. Moving forward, financial resilience will be redefined with Cryptographic Agility, that is, the structural capacity of a network to shift its defense mechanisms without taking critical components offline. Consequently, a nation’s true economic strength will not only be measured by its wealth, but also the speed at which it can reprogram its encryption under time pressure. An upgrade to quantum-resistant cryptography is necessary to prevent quantum hacking even before these computers become widely available.

Subscribe to the Future Economists newsletter by entering your email below to stay updated on our next piece, deep-diving into the solutions to quantum hacking and the economics behind them. 👇

Stay in the loop

Get weekly insights on tech economics, emerging technologies, and the future of finance.

Sources and References