"Factoring integers with sublinear resources on a superconducting quantum processor" seems to indicate the end is getting closer for RSA - much faster than anticipated earlier:
We proceed by estimating the quantum resources required to factor RSA-2048. We find that a quantum circuit with 372 physical qubits and a depth of thousands is necessary to challenge RSA-2048 even in the simplest 1D-chain system. Such a scale of quantum resources is most likely to be achieved on NISQ devices in the near future.
But does this method affect ECC?
In other words: If we get the NISQ device needed to break RSA-2048 using the method above, will that affect ECC with a comparable strength?
Can we buy some time by moving to ECC now, so we can wait for the pqcryto to be standardized, before we move to pqcrypto?
