Mar 25, 2016

According to NIST, researchers are suggesting that a quantum computer capable of breaking 2048 will be available for less than a billion dollars within the next 15 years:

Also relevant is Frederic Jacob's analysis of the NSA's relatively sudden shift towards post-quantum cryptography:

"[It] says that it takes up to 20 years for algorithms to be fully deployed on NSS, and the equipment is often used for 30 years or more. NSA refers to “many experts” that predict a quantum computer capable of effectively breaking public key crypto within that timeframe and that it is important to address that concern."