Quantum cryptanalysis is no help with symmetric ciphers. All the data encrypted "at rest" via symmetric ciphers, which is what companies are usually bragging ab

Quantum cryptanalysis is no help with symmetric ciphers. All the data encrypted "at rest" via symmetric ciphers, which is what companies are usually bragging about, isn't affected. Now, I'm sure there's a ton of data that the NSA will be able to break with quantum computing, because people often do transmit data by encrypting it with an asymmetric cipher, e.g. PGP. But... there's already work on quantum-proof asymmetric ciphers. And TLS uses RSA, so maybe they can crack all the https traffic? Well, assuming today's algorithms are configured correctly, they employ perfect forward secrecy. That means the key exchange algorithms never transmit or store the encryption key, rather an emphemeral encryption key is recreated by both sides. Of course, even with PFS they do get all the metadata and certs when they crack RSA.