Which Nation Will Reign Quantum Supreme?

Every major power is now in two races at once.

The first is to build a quantum computer powerful enough to change the balance of science, industry and security. The second is to protect everything they run before someone else gets there first.

Most coverage looks at one race or the other. This issue puts them side by side, nation by nation, and asks the question that matters for anyone holding digital assets: when the machine arrives, who will be ready?

The Race to Build

Quantum computing has become a matter of national strategy, and governments are now putting dates and money behind it.

🇺🇸 United States. In May, the Commerce Department took equity stakes worth around $2 billion in nine quantum companies, treating them as strategic national assets rather than research projects. In July, the White House detailed more than $2.2 billion in support for a fault-tolerant quantum computer by 2028.

🇨🇳 China. State-led spending is estimated at over $15 billion. In March, quantum was ranked first of seven "future industries" in the new Five-Year Plan. China has also built more than 12,000 kilometres of quantum key distribution network. It has not published a date for a fault-tolerant machine.

🇪🇺 European Union. More than €11 billion in public research funding across five years. Finland's LUMI programme is building towards a machine with 9 logical qubits by 2029.

🇬🇧 United Kingdom. A £2.5 billion national strategy, with another £2 billion announced in March. The target: UK-based quantum computers running a trillion operations by 2035.

🇯🇵 Japan. Fujitsu and RIKEN are building a superconducting machine with more than 10,000 qubits, targeting 2030.

🇰🇷 South Korea. Around ₩3 trillion of planned investment to 2035, and a national target of a 1,000-qubit machine by 2032.

🇮🇳 India. The National Quantum Mission commits ₹6,003 crore to 2031, with a goal of machines of up to 1,000 qubits.

🇦🇺 Australia. Construction has begun on PsiQuantum's utility-scale site outside Brisbane, backed by A$940 million of public money, with its cooling plant due in 2027.

Germany (around €3 billion) and France (€1.8 billion) run major national programmes alongside the EU's.

Eight governments that agree on very little else, and almost every date lands in the same decade.

The Race to Defend

Building the machine is one race. Protecting against it is another, and that one now has deadlines too.

🇺🇸 United States. In June, an executive order set quantum-resistant key establishment by 2030 and quantum-resistant signatures by 2031 for high-value federal systems. Days later, the Pentagon's strategy called insecure communications an "existential threat" to military operations and set the end of 2030 for every Defense system to support post-quantum cryptography. From January 2027, new national security systems must support the NSA's CNSA 2.0 algorithms.

🇦🇺 Australia. The Australian Signals Directorate wants RSA, Diffie-Hellman, ECDH and ECDSA phased out by the end of 2030. ECDSA is the signature behind most of crypto.

🇫🇷 France. From 2027, ANSSI will stop certifying security products that lack post-quantum cryptography. In France, certification decides who can sell to government.

🇪🇺 European Union. National plans to start by the end of 2026, critical infrastructure migrated by the end of 2030, and as much as feasible by 2035.

🇩🇪 Germany. The BSI recommends hybrid cryptography and sunsets classical-only key agreement at the end of 2031.

🇬🇧 United Kingdom. The NCSC has set three milestones: plans by 2028, the highest-priority migrations by 2031, and everything by 2035.

🇨🇦 Canada. High-priority federal systems by the end of 2031, everything else by 2035.

🇯🇵 Japan. Every government agency on post-quantum cryptography by 2035, with standards based on NIST's.

🇰🇷 South Korea. Full transition by 2035, using its own national algorithms.

🇨🇳 China. Building its own post-quantum standards rather than adopting NIST's, with national standards expected within about three years.

Side by Side

Put the two races next to each other and the picture is striking.

🇺🇸 Fault-tolerant machine targeted for 2028. Federal signatures post-quantum by 2031.

🇦🇺 Utility-scale site from 2027. Classical public-key cryptography gone by 2030.

🇪🇺 9 logical qubits by 2029. Critical infrastructure migrated by 2030.

🇯🇵 10,000 qubits by 2030. Government migrated by 2035.

🇰🇷 1,000 qubits by 2032. Full transition by 2035.

🇬🇧 A trillion operations by 2035. Full migration by 2035.

🇨🇳 No public date for either. Its own standards by around 2028.

In almost every case, the date to build the machine comes before, or alongside, the date to finish defending against it.

What the Comparison Shows

Nobody is racing to break encryption, on paper. Every national target is framed around science, industry and computing power. But whoever builds a large enough machine first will be able to run Shor's algorithm on it, and everyone else's migration dates assume they get there in time.

The world is splitting into two cryptographic camps. The US, Europe, the UK, Canada, Australia and Japan are building on NIST's standards. China and South Korea are developing their own. For global systems, that means interoperability is about to get harder.

The machines and the deadlines are converging. Most build targets fall between 2027 and 2032. Most defence deadlines fall between 2030 and 2035. The two timelines overlap, and nobody can be sure which one finishes first.

Every deadline above is enforceable, except on blockchains. A government can order its agencies to migrate and its suppliers to comply. It cannot order a decentralised network to change its signature. Ethereum has set itself December 2029. Most chains have set no date at all.

Where NaoX Fits

NaoX was built for the world these two races are creating.

Transactions on NaoX can be signed with ML-DSA-87, from NIST's FIPS 204 standard, at Security Level 5, the highest NIST defines. It is the same signature family the US, UK, EU, Canada, Australia and Japan are building their migrations on, and the signature the NSA's CNSA 2.0 suite specifies for general use.

The validator registry has only ever accepted ML-DSA-87 keys, enforced since genesis, and signatures are verified natively by the chain in around 38.5 microseconds. Full EVM compatibility means Solidity, Hardhat, Foundry, ethers and MetaMask work as they always have.

So while governments race to migrate, there is nothing on NaoX waiting to be migrated.

The Clock Is Already Running

Nations are spending billions to build quantum computers, and setting hard deadlines to defend against them. Those two timelines are converging in the same few years.

The machines will be built on national schedules. The question for every chain, every exchange and every holder is whether their cryptography is ready before the first one switches on.

FAQs

Which country is leading the quantum race?

It depends on the measure. China leads on estimated state spending, and the US on private investment and public targets, with a fault-tolerant machine aimed for 2028. Japan, South Korea, India, the UK, the EU and Australia all have national programmes with dates in the next decade.

When do governments want to be post-quantum?

Mostly between 2030 and 2035. Australia wants classical public-key cryptography phased out by 2030, the US wants federal signatures post-quantum by 2031, and the UK, Japan and South Korea are working to 2035.

Do all countries use the same post-quantum standards?

No. The US, Europe, the UK, Canada, Australia and Japan are building on NIST's standards. China and South Korea are developing their own algorithms.

Do government deadlines apply to blockchains?

Not directly. Governments can mandate migration for their agencies and suppliers, but no government can force a decentralised network to change its signatures.

Is NaoX built on the same standards governments are adopting?

Yes. Transactions on NaoX can be signed with ML-DSA-87, from NIST's FIPS 204 standard, at Security Level 5.

About NaoX Protocol

NaoX is a post-quantum Layer 1 blockchain and decentralised infrastructure protocol designed to secure digital assets, applications and systems across the decentralised stack.

Built with NIST-standardised post-quantum cryptography and full EVM compatibility, NaoX enables transactions to be signed with FIPS 204 at Security Level 5 while existing tools, contracts and developer workflows continue to work unchanged.