Proving Ownership After Q-Day: Project Eleven's Wallet Recovery Proof Reaches Beyond Bitcoin

Chapter 13 of Quantum from the Ground Up covers the Q-Day timeline: Google researcher Craig Gidney's 2025 estimate of roughly one million physical qubits to break RSA-2048, and the IonQ fidelity result that pulled some estimates into a 2029 to 2033 window. That chapter treats Q-Day as an encryption problem: once a quantum computer can derive a private key from a public key, the signature scheme securing a wallet fails. A proposal from the security firm Project Eleven treats it as an ownership problem instead, and the distinction matters for anyone holding funds in an address generated before a migration to quantum-safe cryptography. The July 16 announcement was framed around Bitcoin, but the mechanism targets any wallet built on BIP-32-style hierarchical derivation, which includes Ethereum and other ECDSA chains, not Bitcoin alone.

The failure mode is simple. A wallet proves ownership by signature: if you can sign a transaction with the private key tied to an address, the network accepts you as the owner. Once elliptic-curve cryptography breaks, an attacker holding your address's public key can derive the same private key and produce a signature the network cannot tell apart from yours. Ownership by signature stops meaning anything. Project Eleven CEO Alex Pruden framed the central problem as proving who owns a wallet once quantum attacks become possible, not just stopping the attack, which is the framing this post follows.

Project Eleven's fix works one level up the derivation tree. Most wallets generate addresses from a BIP-39 seed phrase, the standard list of words a wallet gives you at setup, through a hierarchical, hardened derivation path. This structural proof builds on a concept known as signature lifting—originally described by researchers Alon Sattath and Robert Wyborski—and is implemented here as a form of cryptographic lineage verification. Breaking the elliptic-curve key at the address level does not hand an attacker the parent key higher up that path, because the hardened derivation step runs through a hash function, not an elliptic-curve operation. A zero-knowledge proof lets the real owner demonstrate control of that parent key, and that it derives the compromised address, without exposing the key itself. An attacker who has only broken the address-level key cannot produce the same proof.

Jim Posen, lead maintainer of the Binius zero-knowledge proof system, built the implementation with Project Eleven's funding. The resulting Binius-based prover clocks a generation time of just 243 milliseconds on a standard laptop—over 200 times faster than the 55-second benchmark set by Olaoluwa Osuntokun’s unoptimized, CPU-based prototype earlier this year. It is exactly the kind of radical performance leap, driven by Binius's optimization for hash-heavy operations, that turns an academic curiosity into something ready for deployment.

Diagram Gemini generated

None of this is available on any chain today. Project Eleven describes the release as an unaudited prototype that needs explicit protocol-level support, or a dedicated verifier, before any chain could use it for recovery. It also only applies to wallets built on compatible BIP-32-style derivation, which rules out addresses whose provenance was never recorded as a reproducible path. The stakes for getting a recovery layer right are not small: Coinbase's quantum advisory board warned in June that roughly seven million bitcoins are at risk of being stranded without a post-quantum transition.

The technique also does not generalize evenly across chains. Solana, Sui, Aptos, Near, and Stellar derive signing keys from a seed through a single hashing scheme defined at the protocol level, so one proof design covers every wallet on those chains the same way. Bitcoin and Ethereum have no such uniform scheme; wallet software implements BIP-32 derivation its own way, so each wallet family needs its own proof circuit. That is a real engineering cost, and it is why Project Eleven's Bitcoin result is a first case rather than a finished product.

What This Changes in the Book

Chapter 14 already tracks how far post-quantum migration has actually spread: 21.9 percent of the top 1,000 sites, 8.4 percent of the top 100,000, and 3 percent of banking sites had adopted PQC software as of the last edition. Those numbers describe a migration that will not finish on schedule for everyone. The book's framing up to now has been prevention: move assets and systems to quantum-resistant cryptography before Q-Day arrives. Project Eleven's proposal is the first credible recovery mechanism I've seen for the users, custodians, and exchanges who miss that window, and it is not tied to one chain. The next edition's Chapter 14 will add a paragraph on derivation-based recovery proofs as a fallback layer, noting that EdDSA chains get a uniform version of this fix while Bitcoin and Ethereum need it built wallet by wallet.

This post will fold into the September 1 edition of Quantum from the Ground Up. The current edition is available at https://gordostuff.com/p/quantum-from-ground-up-hardware.html 

Quantum Keys Move Onto Production Routers

Quantum Keys Move Onto Production Routers

I led the telecommunications curriculum for Verizon's Next Step New England program and directed National Science Foundation, or NSF, funded Centers of Excellence at Springfield Technical Community College and the University of Central Florida through the transition from my Dad's Plain Old Telephone Service, or POTS, landlines to Internet Protocol, or IP, based voice, video, and data over copper, fiber and wireless. Our center worked closely with Cisco through that transition. The physics and the protocols changed rapidly snd it was a wild ride. What made the transition real was not the standards documents. It was carriers running the new transport on switches and routers in the central office, and technicians who did not need an advanced degree to keep it running.

Quantum key distribution, or QKD, is a way to generate an encryption key using the behavior of individual photons instead of math. Two machines exchange specially prepared light particles over fiber. If anyone taps the line and looks at those particles, the particles change in a way both ends can detect. That gives you a key exchange where eavesdropping does not stay hidden, which is a different from anything conventional encryption offers.

Aliro Technologies, the Vienna based quantum networking firm zerothird, and Cisco just ran a live version of this over Cisco's production routers at Cisco's Photonics Center in Vimercate, Italy. The hardware was Cisco's 8000 Series routers, the same platform Cisco sells into data centers today. That detail is the news. QKD has existed in labs for years. Running it on hardware a customer can already buy is the harder problem.

The system runs on the BBM92 protocol, which uses paired entangled photons rather than a transmitted key to establish a shared secret. Entangled photons are pairs of light particles created together so that measuring one instantly tells you something about the other, no matter the distance between them. A source creates these pairs and sends one photon from each pair to each end of the link. Both ends measure what arrives and use those measurements to build an identical key, without the key itself ever traveling across the fiber. zerothird supplies the hardware that does this: the photon source, the equipment that keeps the light polarized correctly, synchronizing clocks, and the software that cleans up errors and strengthens the final key. Aliro's Orchestrator software sits on top and manages the link, the way network management software already watches a conventional router. It tracks error rates and photon counts in real time and can reroute traffic or shut a link down safely if something looks wrong. The finished keys reach the routers through Cisco's Secure Key Integration Protocol, a standard interface, where they secure encrypted sessions between routers the same way a conventional key would, just generated a different way.

Diagram Gemini AI Generated

Chapter 1 of Quantum from the Ground Up covers the fiber problem in quantum networking through the University of Illinois work on ytterbium-171 emitters built for existing telecom infrastructure. That chapter is about getting a quantum signal onto fiber that already exists. This deployment answers the other half of the problem: getting the output of that signal into a router that already exists, with the monitoring and failover a network operations center can actually run day to day.

Chapter 14 frames quantum security as a race between two approaches. Post quantum cryptography, or PQC, keeps using math for encryption, just math that a quantum computer cannot easily break, and the National Institute of Standards and Technology, or NIST, has already published standards for it. QKD, the approach in this demonstration, does not rely on hard math at all. It relies on physics: any attempt to intercept the entangled photons changes them in a way both ends can detect. That is also its limit. A QKD key only protects the specific fiber link between two endpoints, while PQC can protect data anywhere the software runs. That is why Cisco is running both approaches rather than picking one. AT&T's coming quantum resilient Software-Defined Wide Area Network, or SD-WAN, service runs PQC on that same 8000 Series router line, which puts both approaches on the same hardware within the same product family.

The public announcement described the deployment as moving QKD out of isolated research setups and into standard enterprise infrastructure. Coverage of the announcement also framed the three way pairing as proof that quantum networking gear from separate vendors can interoperate in a live deployment, which matters more for enterprise adoption than any single performance number. A separate technical paper from the zerothird team tested the same entanglement based approach over a 22 kilometer fiber link between two data centers, which gives the enterprise demonstration a research paper trail worth reading alongside the press coverage.

What This Changes in the Book

Chapter 1 currently ends at the physics of getting quantum signals onto standard fiber. This deployment extends that story into the network operations layer: orchestration, telemetry, and automated remediation running on hardware already shipping. Chapter 14's framing of PQC and QKD as separate paths still holds, but the AT&T and Cisco pairing on the same 8000 Series router line is worth adding as a concrete case where one operator runs both approaches at once instead of choosing sides.

This post will fold into the next edition of the book, due September 1. The current edition is at gordostuff.com/p/quantum-from-ground-up-hardware.html.

POTS to IP took a decade of this kind of work: new transport riding on racked equipment. Quantum key distribution is passing the same tesst. The obstacle was never the physics. Here it's whether the keys can ride on a router Cisco already sells, watched by software a network operations center knows how to run.

Where the Jobs Actually Are

Some graduates spent the 2026 commencement season blaming AI for a job market that shut them out, loud enough that tech executives got booed at graduation ceremonies over it. Recruiters tell a different story.

Matt Walsh, CEO of the Phoenix search firm Blue Signal, works semiconductor hiring daily and says the problem isn't automation. "There aren't enough people," he says. The United States is heading toward what labor economists call the largest workforce shortage in its history, and it shows up hardest in the fields that build things.

The semiconductor industry expects to add close to 115,000 jobs by 2030. The Semiconductor Industry Association projects a shortfall of 67,000 technicians and engineers to fill them. That gap sits squarely in associate degree and bachelor's degree technical programs, not in the AI research labs getting most of the headlines.

Construction and the skilled trades show the same pattern. Branka Minic, CEO of the Building Talent Foundation, says fewer than half the workers needed in construction are entering the field, even with starting wages hitting $50 an hour in some markets. College graduates aren't matching that pay in comparable years of training.

Cybersecurity tells a similar story. CyberSeek, the workforce tracker built by CompTIA and NIST, counts hundreds of thousands of open cybersecurity positions in the U.S. against a supply of qualified workers that consistently falls short. The roles span network defense, security operations, and incident response, and they don't require a computer science PhD. A two-year degree with the right certifications gets a candidate into the field.

This is good news if you're building a technical career instead of chasing a headline. Employers in semiconductors, cybersecurity, advanced manufacturing, robotics, and skilled trades are competing for candidates, not filtering through thousands of applicants for one opening. Two-year technical programs, apprenticeships, internships and engineering degrees put graduates directly into that competition.

States have noticed too: several are merging workforce and higher education agencies or offering loan payoff incentives to pull people into these pipelines.

The AI panic makes for a cleaner headline than a demographic and skills pipeline problem. But the demand for people who can build, install, test, and maintain physical systems is not shrinking. It's the part of the labor market with the fewest applicants and the most openings.

ETH Zurich Builds Quantum RAM Out of Vibrations

Chapter 5 of Quantum From The Ground Up covers superconducting qubits by way of Josephson junction fabrication and IBM's 1,121-qubit Condor chip. It never had to answer a basic architecture question: where a superconducting qubit puts its data when it isn't actively working on it. Researchers at ETH Zurich just built an answer, and it doesn't look anything like a normal memory chip.

A team led by physicist Yiwen Chu, head of ETH Zurich's Hybrid Quantum Systems Group, split a quantum computer into the same two roles a laptop uses: a processor and a separate working memory. The design uses a superconducting transmon qubit as the processor and a mechanical resonator as memory, on a chip package 7.5 millimeters long. Instead of storing a qubit's state electromagnetically, the resonator holds it as a mechanical vibration, the way a guitar string holds a note, except this vibration follows quantum rules rather than classical ones.

Each resonator supports several distinct vibrational modes, and each mode works as its own memory slot. To run a computation, the qubit reaches into the resonator, pulls out a stored vibration, modifies it, and writes it back. Doctoral students Yu Yang and Igor Kladarić built the hybrid chip alongside Chu. The team validated the architecture by running a Quantum Fourier Transform and a period-finding algorithm on the hybrid chip, published in Science. That marks the first demonstration of mechanical resonators executing real quantum algorithms rather than just holding a state.

Superconducting qubits pack in tightly, but that density crowds out room for data. Electromagnetic memory schemes have historically traded a smaller footprint against coherence time. Mechanical resonators split that trade differently, offering higher storage density and longer coherence in less physical space. the approach still has to prove it scales beyond a single test chip, and Chu's group is continuing the work with that goal in mind.

What This Changes in the Book

Chapter 5's numbers don't move. IBM's Condor still holds at 1,121 qubits and 99.0 to 99.5 percent two-qubit fidelity, and nothing here challenges either figure. What changes is the chapter's scope. Chu's result adds a memory subsystem to the superconducting platform, a second engineering problem the chapter didn't previously address. It's a proof of principle, not a shipped component. A chip built for one qubit and one resonator still has to prove itself when both categories multiply.

This post will fold into the next edition of Quantum from the Ground Up, due September 1. The current edition is free to read at gordostuff.com/p/quantum-from-ground-up-hardware.html, and if it's useful to you, a coffee at ko-fi.com/gordostuff keeps it updated.

Dad and Doug

Lost my father and a close friend, Doug, within months of each other last year. Dad was fine right up until the last few weeks. Doug had been fighting for about five years. I wrote about each of them here already (for Dad, and for Doug), but never posted the obituaries themselves.

This blog has been mostly tech since 2005. But some things need to get written down while I still can, and this is one of them. Miss them both.

Write things down while people are still around to read them. The obituary is the last thing anyone writes about most of us. Everything before it is still yours to say.

The Free Path Into Quantum Work

The entire IBM Quantum Learning catalog is now open to the public, no partner account or IBM Quantum Network membership required. The catalog runs past ten courses, from the basics of qubits and circuits through algorithms for factoring and search, up to a course built around running experiments on processors with 100 or more qubits, all hosted free on the IBM Quantum Platform.

Path from free IBM Quantum Learning courses to certification to a quantum workforce role

The IBM Certified Quantum Computation using Qiskit v2.X Developer - Associate is a single exam built on the same Qiskit SDK and Qiskit Runtime the free courses teach. Since the program launched in 2021, more than 1,300 people across 71 countries have passed it. The exam runs up to $200 depending on location, with an optional $30 practice test through Pearson VUE. The preparation runs $0.

This matters most for programs without a quantum lab or a research grant behind them, which describes most community colleges and a fair number of universities. Qiskit needs Python and a working knowledge of linear algebra. Nothing else.

Every one of my students has a laptop and an internet connection. That's all you need to get started today.

This post rolls into the next edition of Quantum from the Ground Up, due September 1.

The Other Half of the Emerging Quantum Workforce

Chapter 2 of Quantum from the Ground Up covers the Massachusetts side of quantum
workforce building: over fifty million dollars in state investment, a quantum supply chain accelerator complex in Springfield, Massachusetts and a three tier pyramid running from technicians to PhDs. That chapter answers one question. How do you train people for jobs that barely exist yet? It does not answer a second question. Once someone is trained, where do they get time on a real quantum computer?

The federal government's answer is a program most people outside national labs have never heard of. The Quantum Computing User Program, or QCUP, runs out of the Oak Ridge Leadership Computing Facility. It owns none of the hardware it gives access to. Instead it brokers competitive, merit reviewed time on commercial quantum processors from vendors including IBM, Quantinuum, and Rigetti, for researchers doing open, fundamental science.

The mechanism is simple. A researcher submits a project proposal explaining what they want to run and why it needs quantum hardware. The Quantum Resource Utilization Council and independent referees review it for merit. Once approved, every user on that project applies for an account and gets assigned a Scientific Liaison, someone who understands both the science domain and the hardware, to help them get past the parts of quantum programming that have nothing to do with their actual research question.

The growth numbers are accelerating. A 2024 survey of the program found it had grown from 52 projects and 117 users in 2020 to 80 projects and 271 users by the end of 2023. Users range from national lab veterans to graduate students running their first circuit. Most projects are proof of principle work, not production science, which is exactly what you would expect from a field still figuring out what its hardware is good for.

Where the Access Turns Into Results

The hadronization work covered in my previous post, Anthony Ciavarella's simulation of quark binding on an IBM Heron processor, ran entirely through QCUP access. That is not a coincidence. It is the point of the program. Give enough researchers enough time on real hardware and some of them will publish in Physical Review D.

Demand is outrunning the obvious ways to measure it. The 2026 Quantum Computing User Forum at Oak Ridge, running July 20 through 24, closed registration before the event even started. A Fall 2026 hackathon open now for proposals gives existing users priority and asks new applicants to already hold an allocation before an August 7 deadline. This is not a program short on interested researchers.

What This Changes in the Book

Chapter 2 currently frames quantum workforce building as a state level, training focused story: Massachusetts building capacity so people are ready when jobs appear. QCUP is the federal, research access side of the same pipeline, and the book does not mention it yet. The two are not competing models. A pipeline that only trains people without giving anyone hands on time on real hardware produces graduates who have never run a circuit outside a simulator. QCUP is where some of that hands on time actually happens, for the research end of the workforce rather than the classroom end.

The next edition will add QCUP to Chapter 2 as the research access counterpart to the state workforce investment already covered there, with the growth numbers above and a note that at least one book worthy physics result, the Ciavarella hadronization paper, came directly out of that access.

This post will be folded into the next edition of Quantum from the Ground Up, targeted for September 1. The current edition is available at gordostuff.com/p/quantum-from-ground-up-hardware.html

A Quantum Computer Watches Matter Form From Scratch

Chapter 11 of Quantum from the Ground Up covers an IBM quantum chip that helped simulate a large protein molecule in May 2026. A new result uses a chip from the same family for something further from everyday life: watching the pieces of an atom's nucleus form.

Here’s some background - protons and neutrons, the particles that make up the nucleus of an atom, are not the smallest things out there. Each one is built from smaller particles called quarks, held together by a force called the strong force. Physicists call any particle built from quarks a hadron. The process of quarks locking together into a hadron is called hadronization. It happens constantly inside stars, inside particle colliders, and, billions of years ago, in the early universe. Nobody has ever watched it happen step by step, because it unfolds too fast and too small to see, even with instruments as powerful as CERN's Large Hadron Collider.

Anthony Ciavarella, a scientist at Lawrence Berkeley National Laboratory, used 104 qubits on an IBM quantum processor to simulate a piece of this process instead of observing it directly. He reached the machine remotely through a Department of Energy cloud access program called QCUP, rather than owning the hardware himself. We’ve described qubits in past posts - the basic unit of information in a quantum computer, similar to a bit in a regular computer, but able to hold more complex states. More qubits generally means a computer can model a bigger or more detailed problem.

The number 104 is an interesting choice and not a hardware limit. IBM's chip has 156 qubits, and Ciavarella used only some of them. In his setup, each qubit stands in for one point on a one-dimensional line of quark positions, so the qubit count is really a choice about how long a line to simulate. He picked a line of 104 points, long enough to fit a stretched gluon string spanning most of it, so something called the snap could happen out in the middle where it is easy to see clearly, rather than run into the edge of the simulation before it finished stretching.

The specific piece he simulated is called string breaking. Quarks are linked by something physicists describe as a string made of particles called gluons. Pull two quarks apart and that string stretches, the way a rubber band stretches, until it holds so much energy that it snaps. When it snaps, the energy does not just disappear. It turns into a brand new pair of quarks, which is how new hadrons get built. Ciavarella simplified the problem by using heavier quarks, which move around less and are easier to track, and he set up his simulation using a method he helped develop for preparing a quantum computer's starting state cleanly.

The simulation's answer matched what earlier work on ordinary supercomputers had already found. That match is the actual achievement here. Nobody is claiming the quantum computer beat a classical one. The result, published in Physical Review D, shows that a real quantum computer can reproduce a calculation even though the model was simplified down to one dimension. The data also hinted that the gluon string might briefly act like a heated gas right before it snaps, a detail worth checking again once the simulations get less simplified.

Why This Matters

Quantum computers are noisy. Every operation carries a small error, and those errors add up as a circuit grows. Nobody trusts a quantum result on a problem nobody can already solve until the machine first proves it gets the right answer on a problem people already know. Matching the classical calculation is that proof. It confirms the way Ciavarella mapped quark positions onto qubits, prepared the starting state, and corrected for hardware noise all worked correctly on real hardware, not only on paper.

Ciavarella's model used heavy quarks in one dimension because that version is still solvable classically. Light quarks, three dimensions, and watching a collision unfold in real time rather than checking a single snapshot are where classical computers run out of room, since those calculations carry exactly the kind of entanglement a regular computer cannot represent efficiently. That regime is also the one closest to what actually happens inside a real collision at a facility like the Large Hadron Collider. As Ciavarella put it, physicists already have the theory for hadronization; they have lacked a way to calculate predictions from it. This result is the first step toward a machine that can.

This was not the first attempt at something like this. In 2024, some of the same researchers, working with the University of Washington and Berkeley Lab, used 112 qubits to build and track a hadron directly, watching it move over time in an earlier, related model on an earlier version of this same IBM chip. The 2026 result trades that moving picture for a sharper look at the single moment when a hadron forms. 

What This Changes in the Book

Chapter 5, which covers this family of IBM chips, gets a new data point: the same chip line now has a published result in particle physics, using 104 qubits, on top of the protein simulation already covered in Chapter 11. Chapter 11's claim that this hardware has uses beyond biology gets a second example, and a more direct one, since this simulation ran entirely on the quantum processor rather than splitting the work between a quantum computer and a classical one.

This post will fold into the next edition of Quantum from the Ground Up, due September 1. The current edition is free to download at gordostuff.com/p/quantum-from-ground-up-hardware.html.

The Quantum Chandelier

Photo MIT Technology Review

You've probably seen a photo like this - a tower of gold-plated discs wrapped in loops of wire, narrowing toward a point at the bottom. Google, IBM, and most quantum computing press releases use some version of this image. People call the assembly the chandelier, and it looks like the computer. It isn't. It's the life support system for a chip you can't even see in the photo.

Start with what's actually inside a quantum computer. A qubit is a physical device, usually a tiny loop of superconducting metal, that can hold a mix of two states at once instead of a single 0 or 1. That mixed state is fragile. A stray photon, a vibration, or a few millikelvin of extra heat can collapse it before you get a useful calculation out of it. Physicists call that collapse decoherence, and it's the central engineering problem in the entire field. Keeping decoherence at bay is the whole reason the chandelier exists.

Why It Has to Be That Cold

At room temperature, everything around a chip is radiating heat as stray photons, trillions of them, bouncing around and hitting anything nearby. For a normal computer chip that's irrelevant. For a superconducting qubit it's fatal, since a single one of those stray photons carries enough energy to flip the qubit's state. Cooling the chip down to the mixing chamber stage, near 10 millikelvin starves the environment of those stray photons and also lets the qubit's own wiring become superconducting, meaning it carries current with zero electrical resistance. Both effects are required. Without one or the other, the qubit decoheres in nanoseconds instead of the few hundred microseconds researchers need.

The Five Stages

The gold structure is a dilution refrigerator, built from stacked stages that grow colder toward the bottom. A pulse tube cryocooler, essentially a specialized mechanical compressor, does the first heavy lifting, dropping the system from room temperature to about 40 Kelvin and then 4 Kelvin using compressed helium gas. Below that, the fridge switches to a different method. A chamber called the still boils off helium-3 to reach roughly 0.7 Kelvin, and a series of heat exchangers pushes the temperature down further, through about 0.1 Kelvin, to the mixing chamber at the very bottom. A mixture of helium-3 and helium-4 drives that last stage. The full cooldown from room temperature to base takes 24 to 48 hours, and it has to happen every time the system needs to be opened for maintenance.

Each gold disc in the photo is one of these stages, plated in gold because gold conducts heat well, resists corrosion, and doesn't interfere magnetically with the qubits. Each stage nests inside the next, shielding the colder one below it from the warmer one above.

Figure: the chandelier's cooling stages, colored from gold at the warmest to blue at the coldest, with the qubit chip mounted at the base.

The Wiring Problem

Every wire running through those stages carries control signals down to the qubits and readout signals back up to room-temperature electronics. A signal heading down gets attenuated at each stage on the way, stripping out electrical noise picked up from the warmer stages above. A signal heading up gets amplified, since the qubit's own readout signal is too faint to detect at room temperature. Every one of those wires is also a heat leak. Heat travels down a wire just as easily as a signal does, and the cooling power at the base stage is measured in microwatts, barely enough to warm a fraction of a grain of rice. A single wire that's improperly thermalized can add more heat than the entire fridge can remove.

That tradeoff is why wiring, not the qubits themselves, has become one of the field's biggest scaling obstacles. Each qubit needs its own set of control and readout lines, so the number of cables required grows directly with qubit count, eventually exceeding what a single cryostat can physically hold. Labs are now racing to move some control electronics inside the fridge itself, onto chips that can survive the cold, so fewer wires have to cross from room temperature down to the millikelvin stage. A single dilution refrigerator system runs one to five million dollars, and most of that cost is solving this wiring problem.

What's Actually Quantum

The qubit chip itself sits at the very bottom, bolted to the mixing chamber, a few millimeters across. It's small enough to miss in most photos of the chandelier, which is the point. Everything above it, every gold disc, every coil of coax, every attenuator and amplifier, exists for one reason: to keep that small chip cold and quiet enough to hold a quantum state long enough to be useful. Chapter 3 of Quantum from the Ground Up makes this argument directly: physics works, engineering makes it work. The chandelier is that argument built out of gold-plated copper and helium-3.

Next time a chandelier photo turns up in your feed, look past the wiring for the small chip at the bottom. That chip is the entire quantum computer. Everything else in the picture is plumbing.

This post will fold into the next edition of Quantum from the Ground Up, out September 1.

The Second June 22, 2026 Quantum Executive Order

In a post Tuesday, I covered the executive order setting hard federal deadlines for post-quantum cryptography migration: key establishment by 2030, digital signatures by 2031. That order dealt with defense. On the same day, June 22, the president signed a second order that deals with offense.

Executive Order 14413, "Ushering in the Next Frontier of Quantum Innovation," directs the federal government to build a large-scale quantum computer for scientific use. The centerpiece is the Quantum Computer for Application Development and Discovery Science effort, called QC-ADDS. The order directs the Department of Energy to deliver at least one QC-ADDS system to a DOE facility and make it available to the scientific community.

Here's some details - within 90 days, DOE must publish the technical specifications required for QC-ADDS to perform transformative scientific applications beyond current classical computer capabilities. Within 180 days, DOE must explore private-sector partnership models and report on cost, scope, and delivery timeframe. DOE has already responded: its Quantum Genesis initiative targets a fault-tolerant, scientifically relevant quantum computing capability by 2028, with a National Quantum Supercomputing User Facility to give U.S. researchers access to systems across multiple qubit modalities.

The Commerce Department must develop a plan for advance market commitments to pull in commercial quantum vendors. The Defense Department gets its own track, establishing programs for national security applications of quantum computing, potentially including a dedicated center. The order also establishes a national center for quantum performance assessment and directs a government-wide quantum workforce recruitment strategy, including special pay rates and retention incentives.

The workforce section carries the most direct relevance for technical education programs. The order tasks NSF to stand up a network of National QIST Workforce Development Institutes within 180 days. Federal money for hands-on QIST training will flow somewhere; the question is where.

There is a thread connecting both orders. The PQC migration order sets a deadline for protecting existing systems. EO 14413 sets a timeline for building the systems that will eventually make those protections necessary. Both orders treat 2030 as the planning horizon. Harvard's Mikhail Lukin put fault-tolerant, large-scale quantum computers at end-of-decade in a recent assessment, five to ten years ahead of earlier estimates.

Inside the ST54M: One Chip, Three Jobs, and a Post-Quantum Upgrade

Yesterday I wrote about our government setting a new deadline for quantum-safe encryption. At the end of the post I briefly mentioned STMicroelectronics introduced the ST54M, the first mobile chip with a dedicated hardware accelerator for post-quantum algorithms. I got a question from a reader – what the heck does that mean....?!  Fair question! Here’s some detail on what that chip does, and how it works. If you use your phone for payments – this is a very good thing.

Tap your phone against a payment terminal and several things have to happen in well under a second. The device has to prove its identity, encrypt the exchange, and complete the transaction before you lift your hand away. Most people never think about the chip doing that work. STMicroelectronics just gave that chip a significant upgrade.

The new chip is called the ST54M. It is a single chip that combines three functions that used to live on separate pieces of silicon: an NFC controller, a secure element, and eSIM support. NFC is the short range radio that lets your phone talk to a payment terminal, a transit gate, or a hotel door lock. The secure element is a locked vault inside the chip that holds your credentials and keys. eSIM is the embedded SIM that lets your carrier profile live in the device itself instead of a removable card. Folding all three into one die (small piece of silicon that contains the electronic circuits needed) simplifies the phone and tightens the security boundary between them.

The bigger story is what ST54M adds on top: a hardware accelerator built for post-quantum cryptography. Today's encryption relies on math problems that are hard for ordinary computers to solve. A sufficiently capable quantum computer could solve some of those problems quickly, which would undermine the locks protecting your payments and your identity data. ST54M supports two newer algorithms, ML-KEM and ML-DSA, designed to resist that kind of attack. Building the acceleration into hardware means a phone can run this stronger cryptography without slowing down.

STMicroelectronics has samples available now, with production and certification targeted for July 2026. The certifications matter for adoption; payment networks and government identity programs will not deploy a chip until it clears those bars.

None of this changes what happens when you tap your phone tomorrow. It changes what is quietly defending that tap a few years from now.