DEEP LOOK | The standards bodies behind financial messaging are lining up the defences against quantum computing’s threat to encryption. On a FIX Trading Community webinar, experts from X9 told firms to stop debating dates and start migrating, with post-quantum certificates due in circulation in 2027.
If quantum computing hasn’t come up at a conference you’ve attended this autumn, it will. The harder question is when it will bite. For experts from US standards body the Accredited Standards Committee X9 (ASC X9), the debate over dates is a distraction.
“Don’t get into an argument about is it going to be this year, next year, five years,” said Steve Stevens, X9’s executive director and chair of its quantum computing risk study group. “The technology is sound… You have solutions right now that will take that risk off the table.”
Why quantum is a threat
That matters because most encryption protecting financial messages (RSA, Diffie-Hellman and elliptic curve cryptography, or ECC) is asymmetric: a public key anyone can see is paired with a private key that must stay secret. Its security rests on maths problems, such as factoring huge numbers, that classical computers can’t crack in useful time. Factoring a 2,048-bit number “would take thousands of years”, said Jeff Stapleton of Wells Fargo, a long-time X9 participant. A big enough quantum computer running Shor’s algorithm could do it “in a number of hours”, deriving the private key from the public one.
Today’s machines stay stable for only milliseconds, but the panel set out two threats firms face regardless. In harvest now, decrypt later (HNDL), traffic recorded today is unlocked once a quantum computer arrives. In trust now, fraud later (TNFL), a cracked key lets an attacker forge digital signatures so altered or spoofed messages look genuine.
A timeline already out of date
The panel’s chart came from the Global Risk Institute’s 2022 Quantum Threat Timeline Report by Michele Mosca of the University of Waterloo. Experts then put the odds of a cryptographically relevant quantum computer at 1–6% within five years (by next year) and 10–27% within ten.
Those figures have aged fast. The latest edition, published in March 2026, puts the ten-year odds at 28–49%. “The curves are probably a little bit steeper,” said Stapleton, pointing to a September paper from quantum hardware maker IonQ. It estimates a machine of around 20,000 physical qubits could break a 256-bit elliptic curve, the one used by Bitcoin, in under 26 days. Stapleton’s team was reviewing it and had flagged it to X9 and to NIST, which had not yet seen it. “Things are moving pretty quickly.”
Washington is adding to the pressure. On 22 June 2026, the US administration signed executive orders directing federal support for a quantum computer powerful enough for scientific research by 2028, and setting a 2031 deadline for the US government’s own move to post-quantum cryptography.
Bill Poletti, co-chair of the X9 Financial PKI operations team, warned that unlike Y2K, “we may not know whether or not a quantum computer’s been developed, because they may not announce it.” He drew a parallel with the old Data Encryption Standard (DES), the US cipher that eventually fell to brute-force attacks. The principle then was simple: “If the data life exceeds the length of time that it takes to break a DES key, well, all that’s exposed. And so the same principles apply.”
The difference this time is visibility. “We knew when DES was broken and we knew the variables associated with it. We don’t know when quantum computing will have an impact.” When it comes, the risk reaches beyond stored data to data in flight and live transactions. “Those kinds of activities will be clandestinely broken and exposed.”
The 2027 deadline
The fix exists. The US National Institute of Standards and Technology (NIST) has published post-quantum cryptography (PQC) standards: FIPS 203 (ML-KEM) for exchanging keys and FIPS 204 (ML-DSA) for digital signatures. Years of scrutiny have “weeded out the ones that were weak”, said Stevens.
The X9 Financial PKI, a public key infrastructure of digital certificates that vouch for who is who, has issued PQC test certificates for 15 months. Its production key ceremony, originally set for the day of the webinar, has slipped to year-end, with production planned for early 2027.
Poletti wants every server, PC, front-end processor and load balancer on TLS 1.3 (transport layer security, the protocol that encrypts data in transit), which supports post-quantum algorithms, by early 2027. “We’re going to start seeing post-quantum digital certificates in circulation… by the end of first quarter, early second quarter of 2027.”
Performance is less of a worry than feared: Wells Fargo’s testing shows “about a 10% hit” at connection set-up. Supply chains are the bigger risk. Stapleton urged firms to pin down vendor roadmaps now, noting the industry scramble after Anthropic’s Mythos AI model “slowed everyone down for about three months”.
This is not a job for the IT department alone. Poletti stressed the need for “full management commitment”, because the change reaches internal systems as well as every counterparty a firm needs to stay interoperable with. “You just can’t plug a certificate in and go with it… It’s going to take a coordinated effort.”
Standards bodies in lockstep
X9, FIX, NIST and the Internet Engineering Task Force (IETF), which writes TLS, “all know each other”, said Stapleton, and “the coordination across all these standards groups is going to be critical.” X9 already has a standard for hybrid certificates, carrying both a conventional and a post-quantum key, out to ballot.
Nor will this be the last upgrade. “We call this the PQC transition, but this is only the first wave,” said Stapleton. That puts a premium on crypto agility, the ability to swap algorithms quickly. “We’re not good at it. We never have been good at it.” Hence the panel’s preference for “quantum-resistant” over “quantum-safe”: “There’s no guarantee anything’s going to be safe.”
Stevens’ advice to boards is simple: “In your next product cycle… talk to your vendors, figure out a plan… and then just take that risk off the table so you don’t have to worry about it anymore.”