Resource use of quantum 256-bit ECDLP attacks EoY 2028
1
Ṁ100Ṁ202028
1H
6H
1D
1W
1M
ALL
50%
≤ 1200 logical qubits and ≤ 70 million Toffoli gates
50%
≤ 1450 logical qubits and ≤ 50 million Toffoli gates
28%
≤ 950 logical qubits and ≤ 90 million Toffoli gates
A new paper from Google demonstrates that there are procedures that break 256-bit ECDLP over secp256k1 with, optionally:
≤ 1200 logical qubits and ≤ 90 million Toffoli gates
≤ 1450 logical qubits and ≤ 70 million Toffoli gates
This question asks if improvements will be made to this frontier by EoY 2028.
This question is managed and resolved by Manifold.
Market context
Get 
1,000 to start trading!
1,000People are also trading
Related questions
Significant attack on post-quantum KEM Kyber published before Nov 2026
19% chance
Significant attack on post-quantum signature Dilithium published before Nov 2026
13% chance
Significant attack on post-quantum signature SPHINCS+ published before Nov 2026
10% chance
Significant attack on post-quantum signature FALCON published before Nov 2026
17% chance
Which of the following quantum computing technologies will first succeed in breaking 256-bit Elliptic Curve Encryption?
Will a quantum attack lead to a real-world crypto theft exceeding $100M before 2032?
256-bit ECC will be broken by 2032
30% chance
In what year will a quantum computer factor the RSA-2048 challenge number?
2043
SHA-256 broken by quantum computer before 2030
5% chance
Will Quantum computing break RSA encryption before 2030?
32% chance