This is probably more significant than any of these papers coming out of China claiming to break RSA or Gift 64 using a western quantum computer. Scott Aaronson, the consummate quantum pessimist has rather abruptly changed his mind. The man who is famous for debunking claims related to quantum capabilities says:
To any of you who are worried about post-quantum cryptography—by now I’m so used to delivering a message of, *maybe, eventually,* someone will need to *start thinking about* migrating from RSA and Diffie-Hellman and elliptic curve crypto to lattice-based crypto, or other systems that could plausibly withstand quantum attack. I think today that message needs to change. I think today the message needs to be: yes, unequivocally, worry about this now. Have a plan.
[https://scottaaronson.blog/?p=8329](https://scottaaronson.blog/?p=8329)
Maybe he's been bought off by Big NIST or Quantinuum, but I kind of doubt it.
