Quantum Breakthrough Shatters AES 256, Forces Emergency Global Crypto Overhaul
A joint research team from ETH Zurich, the University of Tokyo, and Quantinuum has unveiled the first fully functional, fault tolerant quantum computer to demonstrate real time decryption of AES 256, the symmetric cipher that underpins much of the world’s financial, governmental, and internet security.
In a live demonstration streamed from Quantinuum’s quantum data center outside London, the team showed a 512 logical qubit, error corrected system recovering a 256 bit AES key used to encrypt a test dataset provided by the Swiss National Bank. The ciphertext, initialization vector, and algorithm parameters were supplied on stage. The system returned the correct key and plaintext in under 30 seconds, according to independent observers from NIST and the European Union Agency for Cybersecurity.
The underlying hardware is based on Quantinuum’s trapped ion architecture, but heavily modified for large scale error correction. The machine contains roughly 350,000 physical qubits distributed across eight cryogenic modules, stitched together using photonic interconnects and a high bandwidth classical control layer developed with Zurich Instruments and Keysight Technologies. Error rates per logical gate were reported in the 10⁻¹⁵ range using a surface code with adaptive syndrome decoding, enabling the circuit depth and fidelity needed to run a quantum key search algorithm tailored to AES 256.
Researchers said three advances pulled the timeline forward. First, the University of Tokyo group co developed more efficient quantum circuits for key search that reduced total gate counts. Second, the team trained neural network based decoders that speed up error correction decisions in real time. Third, TSMC fabricated a custom control ASIC on a 4 nanometer node that sharply cut latency between qubit measurement and correction pulses.
The system runs inside dilution refrigerators supplied by Bluefors and Oxford Instruments, with integrated cryogenic wiring and optical feedthroughs designed by Thales Cryogenics. Nvidia and AMD provide a hybrid control cluster that orchestrates quantum operations and runs the machine learning decoders in real time. People familiar with the setup said the classical control stack alone draws several megawatts of power, although they expect meaningful efficiency gains in future revisions.
Within hours of the announcement, NIST, the U.S. Cybersecurity and Infrastructure Security Agency, and the European Union Agency for Cybersecurity convened emergency briefings with central banks, major cloud providers, and financial market infrastructure operators. While experts stressed that not every AES protected system is instantly exposed, they agreed that the long held assumption that AES 256 was safe from quantum attack for decades is no longer tenable.
NIST issued a preliminary advisory urging critical infrastructure operators, banks, and large enterprises to treat long lived AES protected data as potentially at risk from well resourced adversaries and to accelerate deployment of post quantum cryptography not only for key establishment and signatures but also for bulk data protection and key wrapping. The agency said it would update guidance on crypto agility, key rotation, and hybrid schemes in the coming weeks.
Hardware security module vendors such as Thales, Utimaco, and Entrust reported a surge in customer inquiries. Large U.S. and European banks have begun reviewing whether their existing HSMs, mainframes, and payment systems can support post quantum key schedules or will require accelerated replacement programs. Amazon Web Services, Microsoft Azure, and Google Cloud each published statements confirming they had been briefed under embargo and committing to roll out quantum resilient configurations for managed key services and storage.
The demonstration relies on a specialized supply chain. Ion traps are fabricated at imec on custom RF compatible silicon wafers, with optical components sourced from Lumentum and Coherent. Brooks Automation assembled vibration isolated optical benches and control racks, while Honeywell, Quantinuum’s industrial parent, contributed vacuum systems and precision mechanical components. TSMC’s control ASIC is one of the first chips explicitly optimized for quantum error correction workloads, with ultra low jitter clocking and interfaces tuned for cryogenic analog to digital converters.
Security vendors focused on post quantum libraries and crypto agility such as PQShield and SandboxAQ are already positioning themselves as migration partners. Consulting firms with cyber and infrastructure practices are preparing “quantum readiness” offerings that bundle cryptographic inventory, risk assessment, and phased rollout plans for new primitives.