One broken lever energy bias, analog leakage, or hybrid ML quantum feedback, the search space stops being flat. At that point, the only quadratic safety story for SHA-256 collapses.
Can you provide some links to read more on that? It sounds interesting, but as a layperson I'm struggling to find material on these topics on a simple web search.
I guess however that are highly speculative scenarios, with a likelihood of under 5% but non-zero or so, as this has never been mentioned in any article I read about quantum threats on cryptography.
Because it is extremely speculative on an order just 1 level less than "what if the whole universe explodes tomorrow?". Possible, but extremely speculative at this point. There is a bit too much optimism that ML, which is simply a fancy marketing slogan for a specific type of algorithms -- quite similar as to "AI". It may flip the world upside down one day, but it also may not.
In my opinion? I think a few years at most with AI revising current topology.
There is no AI, there is absolutely no intelligence whatsoever. Exquisite algorithms are not intelligence.
Look at it through a Game Theory lens.
The literature lags the frontier by a decade. What Im talking about isn't "proven theory", it's noticing the shape of the trajectory.
These are not conclusions, theyre directions.
You dont need AI hype or quantum mythology to see the pattern.
The Incentives are Clear
Quantum + topology correction is a true zero-sum game. Winner takes all,
literally.
Quantum gets built for profit. The first breakthroughs won't be published.
Whoever wins prioritizes topology, because thats where the leverage is.
We already see ML correcting blind spots in areas we thought were provably optimal: compilers, chip layouts, simulation shortcuts, optimization landscapes.
So its reasonable to assume similar pressure will apply to quantum topology next.
This is why the search space stops being flat and the "only quadratic" safety story for SHA-256 collapses.
I'm not saying SHA-256 is doomed tomorrow.
Im saying the assumption chain behind quadratic speedups is weaker than people think.
Its a ~5% likelihood today only because the field hasnt looked there yet.
Whether you call it AI, ML, heuristics, or algorithms, it dont matter. The point is, machines now find optimizations humans miss. That changes timelines.
A hash-only security model assumes the hash function stays flat. An attestation layer commits state.
Dismissing this as FUD assumes attackers are constrained by your mental model of whats possible.