Quantum Computing in Banking: The Next Big Cybersecurity Threat

Quantum Computing in Banking Latest News

• While artificial intelligence (AI) dominates current cybersecurity concerns, a far bigger, longer-term threat is quietly emerging for the banking sector: quantum computing. 
• Financial institutions and regulators worldwide, including in India, have already begun preparing for this threat — years before it is expected to fully materialise.

Current Cybersecurity Push in Indian Banking

• Before quantum enters the picture, regulators have already stepped up conventional cyber preparedness:
  • The Reserve Bank of India (RBI) issued a new cybersecurity and technology-resilience framework for commercial banks in July 2026, covering IT governance, cyber-risk management, and incident response.
  • The Securities and Exchange Board of India (SEBI) introduced an IT Resilience Index in August 2026 for market infrastructure institutions, to measure robustness of critical IT systems and spot weaknesses early.

‹ ›

About Quantum Computing

• Traditional computers store data as a bit (value 0 or 1). Quantum computers use a qubit (quantum bit), which can exist as a combination of 0 and 1 — a property called superposition.
• Qubits also exhibit entanglement, where states of different qubits become closely correlated.
• Quantum algorithms exploit these properties to amplify correct answers and suppress wrong ones, giving quantum computers a massive computational edge for certain problems.
• It can solve in minutes or hours what classical computers would take millennia to complete.

Why This Threatens Bank Encryption

• Modern cryptography relies on mathematical problems that are extremely hard for classical computers to solve. Some widely used public-key systems are:
  • RSA (Rivest–Shamir–Adleman): relies on difficulty of factoring large numbers.
  • Elliptic-curve cryptography: relies on difficulty of discrete-logarithm problems.
• India’s financial ecosystem is deeply digitised through UPI, Aadhaar, RTGS, and NEFT — all underpinned by such cryptography.
• The threat isn’t that quantum computers would directly hack a payment system. Instead, they could undermine the cryptographic building blocks used for authentication, secure communication, key exchange, and digital signatures across digital infrastructure.
• Experts explained: by 2029–2030, quantum computers could become powerful enough to decrypt historical encrypted data — a point often called the quantum deadline.

Why Banks Can’t Wait

• The key reason for acting now is a threat called “Harvest Now, Decrypt Later” (HNDL):
  • Attackers can intercept and store encrypted data today, planning to decrypt it later once powerful quantum computers exist.
  • This makes long-term confidential data especially vulnerable.
  • As per the Digital Threat Report 2025–26 (by CERT-In), while full-scale quantum threats haven’t arrived, HNDL strategies are already active.
• The solution: Transition to Post-Quantum Cryptography (PQC) — encryption algorithms resistant to quantum attacks — before the threat fully emerges.
• Preparation involves:
  • Creating an inventory of cryptographic systems in use.
  • Identifying the most sensitive/critical data.
  • Testing quantum-resistant algorithms.
  • Working with technology vendors.
  • Building Crypto-agility — the ability to switch cryptographic standards without a complete system rebuild. This matters because bank infrastructure spans legacy systems, cloud platforms, third-party vendors, and payment networks.

How Imminent Is the Threat?

• India currently has only a handful of quantum computers, mostly under 10 qubits, developed by institutions like IISc Bengaluru and startups like QpiAI.
• India’s National Quantum Mission (launched 2023) aims to scale from 20–50 physical qubits initially to larger systems over time.
• Globally, NIST (US) has already finalised PQC standards; the G7 has a roadmap for financial-sector transition; the EU wants member states to begin transition by end-2026, with high-risk systems migrated by end-2030.

India’s Quantum-Safe Roadmap

• The Department of Science and Technology’s roadmap for banking/financial services/insurance envisages: 
  • Foundational work by 2027; 
  • Migration of high-priority systems by 2028; and 
  • Full PQC adoption by 2029.
• RBI’s Quantum Secure and Adaptive Financial Ecosystem (Q-SAFE) expert committee is examining quantum’s implications for finance and recommending a roadmap.
• NITI Aayog’s 2025 roadmap for a quantum-powered economy identifies financial modelling, fraud detection, and encryption as key application areas.
• This creates a dual policy challenge for India: protecting digital infrastructure from the quantum threat while simultaneously building domestic quantum capabilities for economic gain.

Conclusion

• Quantum computing represents a slow-building but potentially severe threat to the cryptographic backbone of digital finance — not because it will “hack” banks directly, but because it could eventually break the encryption securing decades of sensitive data. 
• The “Harvest Now, Decrypt Later” risk makes early action non-negotiable, which is why India, alongside global regulators, is already laying out phased roadmaps toward post-quantum cryptography. 
• The challenge ahead is as much about building domestic quantum capability as it is about defending against it.

Source: IE