“With regard to the algorithms used to hash data – particularly SHA-224 and SHA-256 – Buchanan expressed surprise that neither will be approved for use beyond 2030.”

Sounds like corruption to me. Hey gov’t pal, let’s make crazy requirements for security due to a quantum boogyman so I can sell you consultants and all new equipment with insane processing capabilities for a shit ton of money. Look for the greasy palms.

Decades of research and we are at 100 qbits and estimates are bouncing around that estimate it will take millions. Once we build them, job #1 will be reading government email?

Maybe, but it’s a lot easier just to use backdoors, software bugs, spies, and good ol’ bribes.

Yet companies are still pushing 2FA over the PSTN. IMO, it’s worse than no 2FA since some companies have processes that essentially trust the outcome as a full validation. I can’t think of a less secure channel.