🌐 Nation-State Intel

Nation-State Quantum Programs

Intelligence context for quantum risk decisions — publicly known nation-state quantum investment, milestones, and the Harvest Now, Decrypt Later threat.

⚠️ Harvest Now, Decrypt Later (HNDL) is a present threat: Nation-state adversaries are capturing encrypted network traffic today with the intent to decrypt it once a CRQC is available. This is not a future concern — collection is happening now. Data with multi-year secrecy requirements is already at risk.
🇨🇳
China
China is widely assessed to have the largest state quantum computing investment globally. Multiple parallel research tracks across academic, commercial, and military domains.
Highest — Largest State Investment
Est. Investment$15B+ (estimated) — multi-year national quantum program
Key OrganisationsChinese Academy of Sciences, University of Science and Technology of China (USTC), Baidu, Alibaba, Tencent quantum research arms

Key Milestones

  • 2016
    QUESS satellite — First quantum satellite for quantum key distribution (QKD) — demonstrated quantum entanglement at 1,200km between ground stations.
  • 2020
    Jiuzhang photonic computer — Demonstrated quantum supremacy on specific photonic task — 100 trillion times faster than classical supercomputers on the specific problem.
  • 2021
    Zuchongzhi 2.1 — 66-qubit superconducting processor — claimed performance surpassing Google's Sycamore on specific tasks.
  • 2023
    Jiuzhang 3.0 — Enhanced photonic system — claimed significant improvement over previous version.
  • 2024
    Tianyan quantum cloud — National quantum computing cloud platform — access for domestic researchers and industry.

HNDL & Threat Context

Quantum communication: world-leading QKD satellite network (QUESS) and metropolitan QKD networks across major cities. Significant HNDL capability — intelligence community assesses Chinese state actors are actively collecting encrypted traffic for future decryption.

🇺🇸
United States
US leads in commercial quantum computing through IBM, Google, and government research. NSA has mandated PQC migration implying assessed CRQC timeline driving urgent action.
High — Leading in Commercial & CRQC-Relevant
Est. InvestmentNational Quantum Initiative Act: $1.5B (2018–2023). DARPA quantum programs classified. Private sector: IBM, Google, IonQ, Quantinuum, Amazon, Microsoft investing billions.
Key OrganisationsIBM, Google, IonQ, Quantinuum, Amazon Braket, Microsoft Azure Quantum, plus DARPA, NSA, NIST

Key Milestones

  • 2019
    Google Sycamore — 53-qubit processor claims quantum supremacy — solved specific random circuit sampling problem in 200 seconds vs estimated 10,000 years classically.
  • 2022
    NSA CNSA 2.0 — NSA mandates PQC migration for NSS — strongly implies NSA has classified assessment of CRQC timeline.
  • 2023
    IBM Condor — 1,121-qubit processor. IBM Quantum roadmap targeting 100,000+ qubits and utility-scale quantum by 2033.
  • August 2024
    NIST PQC standards — FIPS 203, 204, 205 finalised — the culmination of 8 years of global cryptographic competition.
  • December 2024
    Google Willow — 105-qubit chip with dramatically improved error correction — below the fault-tolerance threshold, a key milestone for logical qubit development.

HNDL & Threat Context

Most advanced error correction progress (Google Willow). Aggressive NSA migration mandate implies classified timeline shorter than public assessments. HNDL collection assessed as ongoing by both US and foreign adversaries targeting US communications.

🇪🇺
European Union
EU Quantum Flagship programme coordinates €1B investment across member states. Germany (BSI), France (ANSSI), Netherlands, and Finland are leading member state programs.
High — Coordinated via Quantum Flagship
Est. InvestmentQuantum Flagship: €1B (2018–2027). Member state contributions additional. Germany, France, Netherlands each have national programs in €100–400M range.
Key OrganisationsForschungszentrum Jülich, TNO (Netherlands), Atos/Eviden (quantum simulators), IQM (Finland/Germany superconducting), Alice & Bob (France, cat qubits)

Key Milestones

  • 2018
    Quantum Flagship launch — EU begins coordinated €1B quantum research programme.
  • 2020
    EuroHPC quantum acceleration — Integration of quantum accelerators into European supercomputing infrastructure.
  • 2022
    ANSSI and BSI PQC guidance — France and Germany publish coordinated guidance recommending immediate hybrid PQC deployment.
  • 2023
    EuroQCI — European Quantum Communication Infrastructure — satellite-based QKD network across EU member states.
  • 2024
    Quantum-ready supply chain — EU Chips Act includes quantum-secure chipset requirements for critical semiconductor supply chain.

HNDL & Threat Context

Strong focus on quantum communication (QKD) in parallel with computing. ANSSI and BSI have most detailed and prescriptive national PQC migration guidance. EU Cyber Resilience Act and NIS2 will incorporate PQC requirements.

🇬🇧
United Kingdom
UK National Quantum Strategy (2023) — £2.5B commitment over 10 years. NCSC has published strong PQC migration guidance.
Medium-High
Est. Investment£2.5B committed 2023–2033 under National Quantum Strategy.
Key OrganisationsUniversity of Cambridge, University of Oxford, NPL (National Physical Laboratory), Riverlane (error correction), Universal Quantum, Sifted/Duality quantum ventures

Key Milestones

  • 2014
    National Quantum Technologies Programme — First phase — £270M for quantum sensors, communications, computing, and imaging.
  • 2022
    NCSC PQC guidance — NCSC publishes detailed PQC migration guidance — one of the most practitioner-friendly government documents on the topic.
  • 2023
    National Quantum Strategy — £2.5B 10-year commitment — aims to make UK a leading quantum-enabled economy.
  • 2024
    Quantum Catalyst Fund — Commercial acceleration of UK quantum companies.

HNDL & Threat Context

Riverlane is specifically focused on quantum error correction software — a key enabler for fault-tolerant quantum computers. UK strength is in quantum sensors and communications as much as computing.

🇷🇺
Russia
Significant state quantum investment but less public information than other major powers. Russian Academy of Sciences and Rosatom are leading programs. Sanctions since 2022 have impacted hardware access.
Medium — Limited Public Visibility
Est. InvestmentEstimated $500M–1B state investment. Exact figures classified.
Key OrganisationsRussian Quantum Center, Rosatom, Moscow State University, National Research University Higher School of Economics

Key Milestones

  • 2019
    Russian Quantum Center — Advanced quantum communications and computing research — quantum cryptography focus.
  • 2021
    16-qubit processor — Rosatom announces first Russian quantum computer — 16 qubits.
  • 2023
    50-qubit roadmap — Russian government announces plan for 100-qubit processor by 2025.

HNDL & Threat Context

Russia was assessed as having strong HNDL collection operations before 2022 sanctions. Western sanctions have restricted access to advanced semiconductor fabrication equipment, which may slow quantum hardware progress. Strong academic cryptography tradition — assessed as having sophisticated cryptanalysis capability.

🇮🇳
India
National Quantum Mission (2023) — ₹6,003 crore (approximately $720M) over 8 years. Focused on computing, communications, sensing, and materials.
Medium — Growing Investment
Est. Investment₹6,003 crore (~$720M) over 2023–2031 under National Quantum Mission.
Key OrganisationsIISc Bangalore, IIT Bombay, IIT Madras, C-DOT (Centre for Development of Telematics), TCS Quantum Research, Infosys quantum research

Key Milestones

  • 2020
    TCS quantum computing work — Tata Consultancy Services begins quantum algorithm research and hybrid quantum-classical computing.
  • 2023
    National Quantum Mission — Indian government commits ₹6,003 crore for 8-year national quantum program.
  • 2024
    Quantum computing access — India gains access to IBM Quantum through university partnerships and government programs.

HNDL & Threat Context

India's quantum program is growing rapidly but currently behind China, US, and EU in hardware development. CERT-In and SEBI have not yet published PQC-specific mandates. Financial sector (RBI, NPCI, SWIFT-connected banks) should begin migration planning aligned with global SWIFT CSCF guidance.

Harvest Now, Decrypt Later (HNDL) — The Present Threat

HNDL is not a theoretical future threat. Nation-state adversaries are capturing encrypted network traffic today. The data sits in storage until a CRQC exists to decrypt it. For data that must remain secret for 10+ years, the collection window is already open.

How HNDL works

Collection Adversary taps undersea cables, internet exchange points, or intercepts specific target network traffic. Encrypted traffic is captured in bulk. This is technically straightforward and known to be practiced at scale.
Storage Captured encrypted data stored at scale. Storage cost has declined dramatically — petabytes of encrypted traffic are storable for years at manageable cost for nation-state adversaries.
Wait Adversary waits for a CRQC to exist. The decryption key is the quantum computer, not any secret extracted from the network. The data remains secure as long as no CRQC exists.
Decrypt Once a CRQC is available, the adversary can work through captured traffic and decrypt communications that used RSA or ECC key exchange, recovering plaintext.

What is already protected by forward secrecy?

TLS 1.3 with ECDHE provides forward secrecy — each session generates a new key pair. Even if the session key is recovered later, previous sessions are not compromised. However, the ECDHE key is itself quantum-vulnerable. Enabling PQC hybrid (X25519Kyber768) provides quantum-safe forward secrecy: even if a CRQC exists later, sessions encrypted with PQC hybrid key exchange cannot be decrypted.

What is NOT protected and needs action now

⚠️ Long-lived encrypted data: files, databases, backups encrypted with RSA-wrapped keys — the RSA key wrap is vulnerable.
⚠️ Historical VPN traffic: if VPN did not use ephemeral Diffie-Hellman (ECDHE), captured sessions are vulnerable.
⚠️ S/MIME and PGP encrypted email: often use long-lived RSA keys — all captured historical email is at risk.
⚠️ Static RSA key exchange (TLS 1.2 without forward secrecy): not protected by forward secrecy — captured traffic decryptable.
⚠️ Classified communications: any government or military traffic captured before PQC migration is at risk.

Global Quantum Program Comparison

Country / RegionInvestment LevelKey StrengthCRQC ProximityHNDL Threat Level
China $15B+ (estimated) Quantum communications (QKD satellite), photonic computing Assessed as high — state classification prevents public verification Critical — HNDL operations assessed as active at scale
United States $5B+ (govt + private) Error correction (Google Willow), commercial scale (IBM), fault-tolerant roadmap High — NSA CNSA 2.0 mandate implies short timeline assessment Active — NSA assesses foreign HNDL collection is ongoing
European Union €1B+ Flagship + member states Quantum communications, sensing, diverse hardware approaches Medium-High — catching up on error correction Moderate — EU and member state HNDL operations less assessed
United Kingdom £2.5B (2023–2033) Error correction software (Riverlane), quantum sensing Medium — strong research, less hardware than US/China Moderate — UK GCHQ known collection capability
Russia $500M–1B (est.) Cryptography, quantum communications Medium — hardware progress limited by 2022 semiconductor sanctions High — SVR/GRU HNDL operations assessed as active
India ~$720M (2023–2031) Software, algorithms, growing hardware Low-Medium — program recently launched Low — no current CRQC-level threat assessment
Japan ¥300B+ (est.) Photonics, quantum networking, industrial applications Medium Moderate
Canada CAD $360M (NQI) Quantum computing theory, IQC, Xanadu photonic Medium Low

Note: All HNDL threat assessments above are based on publicly available intelligence community statements, academic assessments, and government advisories. No classified information is referenced. Assessments should be interpreted as indicators for risk planning, not definitive intelligence judgements.