Quantum Risk Institute
Research Library
This page collects the main source categories QRI uses to evaluate quantum risk.
Core source categories
- Quantum threat timeline surveys and CRQC probability analysis.
- NIST post-quantum standards and migration material.
- CISA and NSA quantum-readiness guidance.
- Bitcoin Improvement Proposals and Bitcoin Core release material.
- Public research on error correction, logical qubits, Shor's algorithm, Grover's algorithm, and fault tolerance.
How to use this library
Start with the white paper if you want the 0-100 model. Start with the standards tracker if you manage systems. Start with Bitcoin Risk if your concern is wallet exposure.
Related QRI pages
Sources and further reading
- Global Risk Institute - Quantum Threat Timeline Report 2025
- NIST CSRC - Post-Quantum Cryptography project
- NIST NCCoE - Migration to post-quantum cryptography
- CISA - Quantum-readiness migration to post-quantum cryptography
- NSA - Post-Quantum Cybersecurity Resources
- Bitcoin BIP 340 - Schnorr signatures over secp256k1
- Bitcoin Core - Taproot activation release notes
QRI content is educational research commentary, not financial advice, legal advice, or a prediction.
QRI analysis notes
Research Library should be read as part of a broader risk model, not as an isolated prediction. QRI separates three questions: what has been publicly demonstrated, what would be required for cryptographic relevance, and how long migration would take for systems that depend on vulnerable public-key cryptography.
The current public evidence still supports a low near-term Bitcoin threat level. At the same time, the 2025 expert timeline discussion, post-quantum standards activity, and harvest-now-decrypt-later risk all point to the same planning lesson: organizations should use the quiet period to inventory cryptography, understand data shelf life, and reduce future migration pressure.
How QRI reviews this topic
For this page, QRI looks for primary-source support, clear language, internal consistency with the 0-100 Quantum Threat Level, and explicit separation between Bitcoin-specific risk and broader public-key infrastructure risk. A page does not earn trust by sounding certain. It earns trust by explaining what is known, what is unknown, and what evidence would change the conclusion.
Readers should treat this page as educational research commentary. It is not financial advice, legal advice, or a prediction that a specific quantum computer will arrive by a specific date. The right operational response is proportional readiness: monitor credible evidence, follow standards, and prepare migration paths before urgency becomes expensive.