Nation-State Quantum Programs
Intelligence context for quantum risk decisions — publicly known nation-state quantum investment, milestones, and the Harvest Now, Decrypt Later threat.
Key Milestones
- 2016QUESS satellite — First quantum satellite for quantum key distribution (QKD) — demonstrated quantum entanglement at 1,200km between ground stations.
- 2020Jiuzhang photonic computer — Demonstrated quantum supremacy on specific photonic task — 100 trillion times faster than classical supercomputers on the specific problem.
- 2021Zuchongzhi 2.1 — 66-qubit superconducting processor — claimed performance surpassing Google's Sycamore on specific tasks.
- 2023Jiuzhang 3.0 — Enhanced photonic system — claimed significant improvement over previous version.
- 2024Tianyan quantum cloud — National quantum computing cloud platform — access for domestic researchers and industry.
HNDL & Threat Context
Quantum communication: world-leading QKD satellite network (QUESS) and metropolitan QKD networks across major cities. Significant HNDL capability — intelligence community assesses Chinese state actors are actively collecting encrypted traffic for future decryption.
Key Milestones
- 2019Google Sycamore — 53-qubit processor claims quantum supremacy — solved specific random circuit sampling problem in 200 seconds vs estimated 10,000 years classically.
- 2022NSA CNSA 2.0 — NSA mandates PQC migration for NSS — strongly implies NSA has classified assessment of CRQC timeline.
- 2023IBM Condor — 1,121-qubit processor. IBM Quantum roadmap targeting 100,000+ qubits and utility-scale quantum by 2033.
- August 2024NIST PQC standards — FIPS 203, 204, 205 finalised — the culmination of 8 years of global cryptographic competition.
- December 2024Google Willow — 105-qubit chip with dramatically improved error correction — below the fault-tolerance threshold, a key milestone for logical qubit development.
HNDL & Threat Context
Most advanced error correction progress (Google Willow). Aggressive NSA migration mandate implies classified timeline shorter than public assessments. HNDL collection assessed as ongoing by both US and foreign adversaries targeting US communications.
Key Milestones
- 2018Quantum Flagship launch — EU begins coordinated €1B quantum research programme.
- 2020EuroHPC quantum acceleration — Integration of quantum accelerators into European supercomputing infrastructure.
- 2022ANSSI and BSI PQC guidance — France and Germany publish coordinated guidance recommending immediate hybrid PQC deployment.
- 2023EuroQCI — European Quantum Communication Infrastructure — satellite-based QKD network across EU member states.
- 2024Quantum-ready supply chain — EU Chips Act includes quantum-secure chipset requirements for critical semiconductor supply chain.
HNDL & Threat Context
Strong focus on quantum communication (QKD) in parallel with computing. ANSSI and BSI have most detailed and prescriptive national PQC migration guidance. EU Cyber Resilience Act and NIS2 will incorporate PQC requirements.
Key Milestones
- 2014National Quantum Technologies Programme — First phase — £270M for quantum sensors, communications, computing, and imaging.
- 2022NCSC PQC guidance — NCSC publishes detailed PQC migration guidance — one of the most practitioner-friendly government documents on the topic.
- 2023National Quantum Strategy — £2.5B 10-year commitment — aims to make UK a leading quantum-enabled economy.
- 2024Quantum Catalyst Fund — Commercial acceleration of UK quantum companies.
HNDL & Threat Context
Riverlane is specifically focused on quantum error correction software — a key enabler for fault-tolerant quantum computers. UK strength is in quantum sensors and communications as much as computing.
Key Milestones
- 2019Russian Quantum Center — Advanced quantum communications and computing research — quantum cryptography focus.
- 202116-qubit processor — Rosatom announces first Russian quantum computer — 16 qubits.
- 202350-qubit roadmap — Russian government announces plan for 100-qubit processor by 2025.
HNDL & Threat Context
Russia was assessed as having strong HNDL collection operations before 2022 sanctions. Western sanctions have restricted access to advanced semiconductor fabrication equipment, which may slow quantum hardware progress. Strong academic cryptography tradition — assessed as having sophisticated cryptanalysis capability.
Key Milestones
- 2020TCS quantum computing work — Tata Consultancy Services begins quantum algorithm research and hybrid quantum-classical computing.
- 2023National Quantum Mission — Indian government commits ₹6,003 crore for 8-year national quantum program.
- 2024Quantum computing access — India gains access to IBM Quantum through university partnerships and government programs.
HNDL & Threat Context
India's quantum program is growing rapidly but currently behind China, US, and EU in hardware development. CERT-In and SEBI have not yet published PQC-specific mandates. Financial sector (RBI, NPCI, SWIFT-connected banks) should begin migration planning aligned with global SWIFT CSCF guidance.
Harvest Now, Decrypt Later (HNDL) — The Present Threat
HNDL is not a theoretical future threat. Nation-state adversaries are capturing encrypted network traffic today. The data sits in storage until a CRQC exists to decrypt it. For data that must remain secret for 10+ years, the collection window is already open.
How HNDL works
What is already protected by forward secrecy?
TLS 1.3 with ECDHE provides forward secrecy — each session generates a new key pair. Even if the session key is recovered later, previous sessions are not compromised. However, the ECDHE key is itself quantum-vulnerable. Enabling PQC hybrid (X25519Kyber768) provides quantum-safe forward secrecy: even if a CRQC exists later, sessions encrypted with PQC hybrid key exchange cannot be decrypted.
What is NOT protected and needs action now
Global Quantum Program Comparison
| Country / Region | Investment Level | Key Strength | CRQC Proximity | HNDL Threat Level |
|---|---|---|---|---|
| China | $15B+ (estimated) | Quantum communications (QKD satellite), photonic computing | Assessed as high — state classification prevents public verification | Critical — HNDL operations assessed as active at scale |
| United States | $5B+ (govt + private) | Error correction (Google Willow), commercial scale (IBM), fault-tolerant roadmap | High — NSA CNSA 2.0 mandate implies short timeline assessment | Active — NSA assesses foreign HNDL collection is ongoing |
| European Union | €1B+ Flagship + member states | Quantum communications, sensing, diverse hardware approaches | Medium-High — catching up on error correction | Moderate — EU and member state HNDL operations less assessed |
| United Kingdom | £2.5B (2023–2033) | Error correction software (Riverlane), quantum sensing | Medium — strong research, less hardware than US/China | Moderate — UK GCHQ known collection capability |
| Russia | $500M–1B (est.) | Cryptography, quantum communications | Medium — hardware progress limited by 2022 semiconductor sanctions | High — SVR/GRU HNDL operations assessed as active |
| India | ~$720M (2023–2031) | Software, algorithms, growing hardware | Low-Medium — program recently launched | Low — no current CRQC-level threat assessment |
| Japan | ¥300B+ (est.) | Photonics, quantum networking, industrial applications | Medium | Moderate |
| Canada | CAD $360M (NQI) | Quantum computing theory, IQC, Xanadu photonic | Medium | Low |
Note: All HNDL threat assessments above are based on publicly available intelligence community statements, academic assessments, and government advisories. No classified information is referenced. Assessments should be interpreted as indicators for risk planning, not definitive intelligence judgements.