{ "id": "S09", "slug": "cryptographic-trust-break", "title": "A cryptographic breakthrough invalidates digital trust", "version": "0.5.0", "status": "active", "orientation": "downside", "family": "D", "short_title": "Cryptographic trust break", "thematics": [ "ai-cyber-digital", "resilience-crisis-preparedness", "information-integrity-social-cohesion" ], "likelihood_type": "systemic", "likelihood_note": "The likelihood is that of an attack that is demonstrated or becomes evident. A capability that exists but is used covertly does not meet the definition until it is discovered.", "scores": { "likelihood_2y": { "band": 1, "rationale": "No publicly known quantum computer is near the scale required. Published resource estimates for breaking 2048-bit RSA fell from about 20 million physical qubits in 2019 to under one million in 2025, but machines disclosed by 2026 hold far fewer, with error correction shown only on small numbers of logical qubits. A two-year event would need a concealed programme several years ahead of every public one. That is not excluded, but there is no evidence for it." }, "likelihood_10y": { "band": 3, "rationale": "Developers' published roadmaps target fault-tolerant machines by about 2030, resource estimates have fallen by more than an order of magnitude in six years and state programmes do not report progress. Against that, engineering at the required scale is unproven, and migration shrinks the vulnerable estate each year. The event needs both a working machine and adversarial use before migration is complete, which places it in the 1 to 5 per cent range." }, "impact_systemic": { "level": 3, "rationale": "Physical networks keep running, so the loss comes from transaction friction, suspended cross-border services, emergency replacement and fraud, not destroyed capacity. Lloyd's puts a major attack on payment systems at US$3.5 trillion over five years. A 12-month migration across finance, government and trade documentation is broader than that case, which supports level 3. No lasting loss of productive capacity is assumed, which holds the rating below level 4." }, "impact_national": { "level": 4, "rationale": "Rated on security and essential services for a highly exposed nation. Archived diplomatic, defence and intelligence traffic must be assumed readable, which cannot be reversed. Digital identity, remote signing and some payment services are restricted for weeks to months; Estonia suspended certificates on about 760,000 identity cards in 2017 for a far narrower flaw. Economic damage alone would rate level 3. The security loss raises the rating to level 4." }, "confidence": { "level": "low", "reason": "There is no precedent for the failure of an entire class of cryptography, state quantum programmes are not observable and the rating was held by one member of the panel." }, "priority": 4, "tier": "III", "source": "model-panel-v0.5" }, "scorecard": { "onset": "days", "duration": "1 year (revocation in 30 days, emergency migration over 12 months)", "warning": "none (the general risk was known; the date was not)", "scope": "global", "origin": "adversarial (great power)", "external_support": "partial", "policy_response": "current plans executed", "recovery_horizon": "years" }, "summary": "An adversary demonstrates a practical quantum attack on widely used public-key cryptography (RSA and elliptic-curve algorithms) by decrypting intercepted material and forging selected digital signatures. Within 30 days, governments and financial operators must revoke vulnerable credentials and suspend some cross-border services. Sensitive data collected and stored in earlier years become readable. Emergency migration to post-quantum algorithms takes 12 months because embedded devices and supplier software cannot all be replaced at once. Physical networks keep operating, but confidence in authentication, confidential exchange and the legal validity of digital transactions falls sharply. Symmetric encryption with long keys is assumed to hold.", "narrative": { "dateline": "March 2032", "text": "On 9 March 2031 three foreign ministries received copies of their own diplomatic cables from 2024, in plain text, through an intermediary. Within the week a software update carrying a valid signature from a large operating-system supplier was found on test machines at two central banks. The supplier's signing key had not been stolen. Forensic teams in four countries reached the same conclusion: the private key had been computed from the public one. A state held a quantum computer able to break 2048-bit RSA and 256-bit elliptic-curve keys at a rate of about one key a day, and had chosen to show it.\n\nThe rate mattered. The adversary could not read everything, but no defender could tell which keys it had already taken. Root certificates, code-signing keys and interbank message keys were treated as compromised. In the first 30 days governments and financial operators revoked credentials in order of consequence. Seven national identity schemes suspended remote signing. Several payment systems limited cross-border instructions to counterparties that had already moved to post-quantum algorithms or pre-shared symmetric keys, and correspondent banks reintroduced call-back confirmation and value limits. Electronic bills of lading were refused at a number of ports and paper documents returned.\n\nNothing physical failed. Power, telecommunications and data centres operated throughout. What stopped was the assurance that a message came from its sender, that a record had not been altered and that a signature would stand in court. Courts in several jurisdictions were asked whether contracts signed with revoked algorithms remained valid, and legislatures passed validating acts for documents signed before the disclosure date.\n\nNations that had completed cryptographic inventories and deployed hybrid key exchange on their main systems before 2030 finished the urgent work in about four months. Others found that they did not know where the vulnerable algorithms were. Smart cards, hardware security modules, industrial controllers, vehicles and medical devices held keys that could not be changed remotely, and replacement units were on allocation for most of the year. Specialist engineers were scarce and moved to the employers that paid most. Smaller states depended on a few foreign cloud and certificate suppliers for the timetable of their own recovery.\n\nThe larger loss was retrospective. Traffic intercepted and stored since the 2010s became readable at a pace the adversary chose. Agent identities, negotiating positions, health records and commercial secrets from two decades had to be assumed exposed. Selected disclosures continued through 2031 and were timed to coincide with negotiations and elections. Forged documents carrying valid signatures under the old algorithms circulated beside genuine ones, and official denials had limited effect.\n\nBy March 2032 most critical systems in advanced economies ran on post-quantum algorithms. Long-lived devices and many public registries in lower-income countries did not. The event was not an outage, and continuity plans written for outages did not apply. The capability it tested was knowing where trust was held in each system and being able to replace it in order of consequence." }, "anchors": [ { "shock_id": "diginotar-compromise-2011", "date": "June to September 2011", "event": "DigiNotar compromise", "what_happened": "An intruder issued more than 500 fraudulent certificates from the Dutch certificate authority DigiNotar, including one for google.com that was used to intercept traffic from about 300,000 addresses, almost all in Iran. Browsers removed trust, the Dutch government took over the company's operations because its own services relied on DigiNotar certificates, and the company was declared bankrupt in September 2011.", "calibrates": "The speed at which trust is withdrawn once forgery is shown and the exposure of government services to a single certificate supplier. One authority failed in 2011; the scenario fails the algorithms that every authority uses." }, { "shock_id": "heartbleed-2014", "date": "April 2014", "event": "Heartbleed", "what_happened": "A flaw in the OpenSSL library, disclosed on 7 April 2014, allowed private keys to be read from server memory. Netcraft estimated that about 17 per cent of secure web servers, around half a million, were vulnerable. Operators had to patch, revoke and reissue certificates, and many did so slowly or not at all. The Canada Revenue Agency suspended online services for several days after 900 social insurance numbers were taken.", "calibrates": "Mass revocation and reissue under time pressure, and the tail of systems that are never fixed. Heartbleed needed a software patch; the scenario needs new algorithms and, where keys are fixed in devices, new hardware." }, { "shock_id": "estonian-id-card-suspension-2017", "date": "September to November 2017", "event": "Estonian identity card certificate suspension", "what_happened": "A flaw in the key-generation library of a widely used chip made RSA keys on Estonian identity cards open to factoring in principle. On 3 November 2017 Estonia suspended the certificates of about 760,000 cards and required holders to update them remotely or in person. No theft of identity was reported. Service points were congested for weeks.", "calibrates": "The national impact rating. A state with high digital capability took about two months to manage a flaw in one chip and one credential. The scenario affects every credential type at once and gives no period of private notice." }, { "shock_id": "nist-post-quantum-standards-2024", "date": "13 August 2024", "event": "NIST post-quantum cryptography standards", "what_happened": "The US National Institute of Standards and Technology published its first three post-quantum standards (FIPS 203, 204 and 205), eight years after it called for proposals in 2016. Its draft transition guidance of November 2024 proposes that RSA and elliptic-curve algorithms at the 112-bit security level be deprecated after 2030 and that these algorithm families be disallowed after 2035.", "calibrates": "The planned migration period, which runs to 2035. An event before then meets an incomplete transition, and the scenario compresses the remaining years of planned work into 12 months." }, { "shock_id": "venona-project-1943", "date": "1943–1980", "event": "Venona project", "what_happened": "United States signals intelligence began in 1943 to work on Soviet diplomatic and intelligence cables that had been intercepted and stored. Reuse of one-time pad material allowed about 3,000 messages sent in the 1940s to be read in whole or in part. The work continued until 1980 and identified agents long after the messages were sent.", "calibrates": "The retrospective loss. Stored intercepts keep their intelligence value for decades, so the damage from a cryptographic failure is measured over the archive and not only from the date of the event." }, { "shock_id": "lloyds-cyber-scenario-2023", "date": "October 2023", "event": "Lloyd's cyber scenario", "what_happened": "Lloyd's modelled a major cyber attack on a financial services payment system and put the global loss at US$3.5 trillion over five years.", "calibrates": "The systemic impact rating. The Lloyd's case is a disruption to payments alone; the scenario adds government identity, trade documentation and software supply, without physical outage." } ], "parameters": { "common": { "severity": { "major": "major", "severe": "severe", "extreme": "extreme" }, "duration": { "major": "90 days", "severe": "1 year (revocation in 30 days, emergency migration over 12 months)", "extreme": "3 years" }, "onset": { "major": "weeks", "severe": "days", "extreme": "days" }, "warning": { "major": "months (capability reported before it is used)", "severe": "none (the general risk was known; the date was not)", "extreme": "none" }, "scope": { "major": "global", "severe": "global", "extreme": "global" }, "origin": { "major": "adversarial (great power)", "severe": "adversarial (great power)", "extreme": "adversarial (great power)" }, "external_support": { "major": "full", "severe": "partial", "extreme": "none" }, "concurrency": { "major": "standalone", "severe": "standalone", "extreme": "plus one named scenario (S04)" }, "policy_response": { "major": "current plans executed", "severe": "current plans executed", "extreme": "none (pure exposure)" }, "recovery_horizon": { "major": "months", "severe": "years", "extreme": "years" } }, "specific": [ { "name": "Vulnerable share of public-key credentials in use", "default": "60 per cent", "range": "30 to 90", "unit": "per cent of credentials", "note": "Credentials that still rely on RSA or elliptic-curve algorithms with no post-quantum or hybrid alternative deployed. The share falls each year as migration proceeds." }, { "name": "Time to break one key", "default": "1 day", "range": "1 hour to 30 days", "unit": "time for one 2048-bit RSA key", "note": "Decides whether compromise is selective or wholesale. At one day the adversary targets root, code-signing and interbank keys; at one hour bulk decryption of stored traffic becomes practical." }, { "name": "Revocation window", "default": "30 days", "range": "7 to 90", "unit": "days", "note": "Time within which governments and financial operators revoke vulnerable credentials on critical systems." }, { "name": "Emergency migration period", "default": "12 months", "range": "6 to 36", "unit": "months", "note": "Time to move critical systems to post-quantum algorithms. Long-lived devices outside critical systems take longer and are not counted." }, { "name": "Devices that cannot be updated in the field", "default": "25 per cent", "range": "10 to 50", "unit": "per cent of embedded and operational devices holding keys", "note": "Smart cards, hardware security modules, industrial controllers, vehicles and medical devices that need physical replacement." }, { "name": "Depth of readable archive", "default": "15 years", "range": "5 to 25", "unit": "years of stored intercepted traffic", "note": "Period over which an adversary is assumed to have collected and kept encrypted traffic for later decryption." }, { "name": "Cross-border service restriction", "default": "90 days", "range": "30 to 180", "unit": "days", "note": "Period in which some cross-border payment, signing and trade document services are suspended or run under manual confirmation and value limits." } ] }, "transmission": [ "A state shows that it can derive private keys from public keys for RSA and elliptic-curve algorithms, by releasing decrypted intercepts and forging selected signatures.", "Certificate authorities, governments and financial operators treat root, code-signing and interbank keys as compromised and revoke vulnerable credentials within 30 days.", "Services that cannot authenticate counterparties are suspended or restricted: remote signing, some cross-border payments, electronic trade documents and automatic software updates.", "Stored intercepts become readable. Diplomatic, defence, health and commercial records from earlier years must be assumed exposed, and selective disclosure begins.", "Emergency migration competes for scarce engineers, validated modules and replacement hardware. Embedded and operational devices that cannot be updated remotely set the pace.", "Courts and legislatures must rule on documents signed with broken algorithms. Fraud and repudiation claims rise.", "Forged and genuine disclosures circulate together. Confidence in digital records and official statements falls, and manual verification raises transaction costs for a year.", "Dependence on a few foreign suppliers of cloud, certificate and cryptographic services decides the order in which nations recover." ], "loading": [ { "dimension": "Hard", "domain": "defence-security", "load": "High", "channel": "Archived classified traffic becomes readable; command, identity and weapon-system authentication must be re-keyed while the adversary observes." }, { "dimension": "Hard", "domain": "strategic-infrastructure", "load": "Medium", "channel": "Networks keep running; device authentication, signed firmware, remote control links and payment infrastructure need replacement." }, { "dimension": "Hard", "domain": "critical-technology", "load": "High", "channel": "Cryptographic modules, certificate services and quantum capability decide who migrates independently and who waits for foreign suppliers." }, { "dimension": "Soft", "domain": "government-effectiveness", "load": "High", "channel": "Digital identity, signatures, registries and tax systems lose legal assurance; migration must be directed across agencies and operators." }, { "dimension": "Soft", "domain": "human-capital", "load": "Low", "channel": "Shortage of cryptographic engineers; health and education records exposed." }, { "dimension": "Soft", "domain": "influence-cohesion", "load": "High", "channel": "Disclosed diplomatic traffic, forged official documents and lower public confidence in digital records and official statements." }, { "dimension": "Economic", "domain": "macro-financial", "load": "High", "channel": "Payment, settlement and custody authentication; restricted cross-border services; fraud losses and the cost of emergency replacement." }, { "dimension": "Economic", "domain": "industry-trade-supply", "load": "Medium", "channel": "Electronic trade documents, software supply chains and supplier credentials must be reissued; digital services trade slows." }, { "dimension": "Economic", "domain": "energy-resources", "load": "Low", "channel": "Control-system authentication in grids and pipelines is weakened; operation continues under manual assurance." } ], "stakeholders": { "government": { "exposure": "Archived diplomatic, defence and intelligence traffic; national identity and signature schemes; tax, registry and court systems; the legal standing of documents signed with broken algorithms.", "actions": [ "Complete a cryptographic inventory of critical systems and set the order in which credentials would be revoked", "Deploy hybrid post-quantum key exchange on government networks and re-encrypt long-lived secrets ahead of national deadlines", "Prepare validating legislation and manual fallback procedures for identity, signing and cross-border payments" ], "watch": [ "Demonstrated logical qubit counts and published resource estimates", "Share of government systems reported as migrated against national deadlines", "Advisories on large-scale collection of encrypted traffic" ], "relevance": 5 }, "technology": { "exposure": "Root and code-signing keys, certificate services, cloud key management, hardware security modules and embedded devices that cannot be updated in the field.", "actions": [ "Build systems so that algorithms can be replaced without redesign, and test the replacement", "Move software signing and update channels to post-quantum or hash-based signatures first", "Identify devices that need physical replacement and secure supply of validated modules" ], "watch": [ "Post-quantum share of encrypted web traffic", "Issuance of post-quantum certificates by publicly trusted authorities", "Validation queue for post-quantum cryptographic modules" ], "relevance": 4 }, "investors": { "exposure": "Payment, settlement and custody operators; banks with large legacy estates; issuers whose value rests on confidential data; insurers with cyber and professional liability books.", "actions": [ "Ask portfolio companies for a cryptographic inventory and a dated migration plan", "Test liquidity and operations against 90 days of restricted cross-border settlement", "Review cyber policy wordings for accumulation from a single cryptographic cause" ], "watch": [ "Supervisory statements on quantum readiness in financial infrastructure", "Migration disclosures by systemically important payment and settlement operators", "Exclusions for cryptographic failure in cyber insurance renewals" ], "relevance": 4 }, "public": { "exposure": "Digital identity, online banking and signing; health, tax and messaging records collected in earlier years; reliance on official statements that can no longer be verified digitally.", "actions": [ "Keep paper or offline copies of essential identity, property and financial records", "Use the in-person and assisted channels that authorities designate while credentials are reissued", "Treat leaked or signed documents as unverified until the issuing body confirms them" ], "watch": [ "Notices that identity cards, banking devices or applications must be replaced", "Temporary limits on remote signing and cross-border payments", "Official channels for verifying documents and public statements" ], "relevance": 3 } }, "regions": [ { "region": "north-america", "exposure": "High", "rationale": "Largest concentration of cloud, certificate and payment services and extensive archived government traffic; migration capacity is strong and federal deadlines are set." }, { "region": "europe", "exposure": "High", "rationale": "Heavy reliance on qualified electronic signatures and national identity schemes; migration timetables differ between member states." }, { "region": "china", "exposure": "High", "rationale": "A large state and financial estate on public-key systems, including national elliptic-curve algorithms; exposure depends on which power holds the capability." }, { "region": "indo-pacific", "exposure": "High", "rationale": "Advanced digital economies with dense trade documentation and semiconductor supply chains; alliance communications are intelligence targets." }, { "region": "south-asia", "exposure": "Medium", "rationale": "Very large digital identity and payment systems in India; lower digital dependence elsewhere in the region." }, { "region": "gulf-middle-east", "exposure": "High", "rationale": "Financial centres, energy trading and state communications are high-value targets; reliance on foreign security suppliers is high." }, { "region": "africa", "exposure": "Medium", "rationale": "Lower digital dependence, but mobile money and new identity systems use imported cryptography and local migration capacity is thin." }, { "region": "latin-america", "exposure": "Medium", "rationale": "Instant payment systems and digital tax administration are exposed; state archives are a lesser intelligence target." }, { "region": "russia-eurasia", "exposure": "High", "rationale": "State communications and archives are prime intelligence targets; sanctions limit access to replacement hardware and validated modules." } ], "indicators": [ { "name": "Demonstrated error-corrected logical qubits and logical error rates", "source": "Peer-reviewed publications and published roadmaps of quantum hardware developers", "threshold": "100 logical qubits sustaining deep circuits", "cadence": "quarterly" }, { "name": "Published resource estimates for breaking 2048-bit RSA and 256-bit elliptic-curve keys", "source": "arXiv; IACR Cryptology ePrint Archive", "threshold": "under 100,000 physical qubits", "cadence": "as published" }, { "name": "Share of encrypted web traffic using post-quantum key agreement", "source": "Cloudflare Radar", "threshold": "below 50 per cent of requests", "cadence": "monthly" }, { "name": "National migration deadlines and reported progress for critical systems", "source": "NIST transition guidance (IR 8547); UK National Cyber Security Centre migration timelines; European Commission coordinated roadmap", "threshold": "published milestones missed", "cadence": "annual" }, { "name": "Post-quantum certificates in general issuance by publicly trusted authorities", "source": "CA/Browser Forum ballots; Certificate Transparency logs", "threshold": "none in general issuance", "cadence": "quarterly" }, { "name": "Validation queue for post-quantum cryptographic modules", "source": "NIST Cryptographic Module Validation Programme", "threshold": "queue longer than 12 months", "cadence": "quarterly" }, { "name": "Quantum readiness of payment and settlement infrastructure", "source": "Bank for International Settlements (Project Leap reports); G7 Cyber Expert Group statements", "threshold": null, "cadence": "annual" }, { "name": "Official advisories on collection of encrypted traffic for later decryption", "source": "US Cybersecurity and Infrastructure Security Agency; UK National Cyber Security Centre", "threshold": "attributed large-scale collection reported", "cadence": "as issued" } ], "compounds": { "triggers": [ { "id": "S02", "note": "Doubt about settlement and custody authentication could prompt withdrawals and a funding freeze." }, { "id": "S04", "note": "Forged credentials and readable archived traffic give a hostile state concealed access to operators." }, { "id": "S05", "note": "Forged signatures and contested official records feed competing claims to lawful authority." }, { "id": "S01", "note": "Supply of trusted cryptography divides along bloc lines, with incompatible standards and export controls." } ], "triggered_by": [ { "id": "S01", "note": "Technology rivalry accelerates state quantum programmes and reduces disclosure of progress." }, { "id": "S03", "note": "A major power at war has the strongest reason to use or reveal a concealed capability." }, { "id": "S17", "note": "AI-directed research could shorten the path to fault-tolerant hardware or to better algorithms." } ], "amplified_by": [ { "id": "S18", "note": "Greater reliance on digital identity and payments raises the cost of a trust failure where the platform was not built on post-quantum algorithms." }, { "id": "S04", "note": "A hybrid campaign under way gives the adversary prepared access and a reason to time disclosures." } ], "triggered_by_other": [ "An undisclosed advance in quantum error correction inside a state programme", "A classical mathematical advance against factoring or discrete logarithms, which would have the same effect without a quantum computer" ], "amplifying_trends": [ "Quantum computing", "Post-quantum cryptography transition", "Espionage & insider threat", "Cloud & edge computing", "Digital public infrastructure", "Financial market infrastructure resilience", "Trade & logistics digitalisation", "Technical & occupational skill shortages" ] }, "open_questions": [ "Whether a capability that is used covertly and never demonstrated should be a separate preset, since the damage is then found late and no emergency migration is triggered.", "Whether the time to break one key, which separates selective from wholesale compromise, should be a common slider for this scenario and not a specific parameter.", "How to rate nations with low digital dependence: they lose less on the day, but they hold long-lived imported systems and have little capacity to migrate.", "Whether a systemic rating built on output at risk understates a loss that falls mainly on confidentiality and security, which the accounting does not measure." ], "commentary": null, "overview": { "source": "model-panel-v0.5", "lenses": { "political": "**Archived diplomatic traffic** becomes readable and is disclosed selectively. Forged documents with valid old signatures weaken official denials.", "economic": "Some cross-border payment and signing services are restricted for 90 days. **Emergency migration takes 12 months** and manual verification raises transaction costs.", "social": "Health, tax and messaging records from earlier years must be assumed exposed. **Confidence in digital records** and official statements falls.", "technological": "RSA and elliptic-curve algorithms fail together. **Devices that cannot be updated in the field** set the pace of recovery.", "legal": "Courts must rule on **documents signed with broken algorithms**. Legislatures pass validating acts and repudiation claims rise.", "environmental": "There is no direct environmental effect. **Replacement of embedded devices** adds electronic waste, and energy control systems run under manual assurance." }, "regions": { "north-america": "The **largest concentration of cloud, certificate and payment services**, with extensive archived government traffic and strong migration capacity.", "europe": "Heavy reliance on **qualified electronic signatures** and national identity schemes, with migration timetables that differ between member states.", "china": "A large state and financial estate on public-key systems. Exposure depends on **which power holds the capability**.", "indo-pacific": "Advanced digital economies with dense trade documentation. **Alliance communications** are intelligence targets.", "south-asia": "**Very large identity and payment systems** in India, with lower digital dependence elsewhere in the region.", "gulf-middle-east": "Financial centres, energy trading and state communications are high-value targets, with **high reliance on foreign security suppliers**.", "africa": "Lower digital dependence, but mobile money and new identity systems use **imported cryptography** with thin local migration capacity.", "latin-america": "**Instant payment systems** and digital tax administration are exposed. State archives are a lesser target.", "russia-eurasia": "State archives are prime intelligence targets, and **sanctions limit access** to replacement hardware and validated modules." }, "evolution": { "lead_indicators": "**Resource estimates for breaking 2048-bit RSA** under 100,000 physical qubits, demonstrations of 100 logical qubits sustaining deep circuits and advisories of large-scale collection of encrypted traffic.", "triggers": "A state demonstrates a quantum attack on RSA and elliptic-curve keys by **releasing decrypted intercepts and forging selected signatures**. There is no warning of the date.", "immediate": "Root, code-signing and interbank keys are treated as compromised. Governments and financial operators **revoke vulnerable credentials within 30 days** and suspend remote signing and some cross-border payments.", "post_immediate": "Cross-border services run under manual confirmation and value limits **for 90 days**. Stored intercepts become readable, selective disclosure begins and courts rule on documents signed with broken algorithms.", "stabilisation": "**Emergency migration takes 12 months**, paced by devices that cannot be updated remotely and by scarce engineers. Nations with cryptographic inventories finish urgent work in about four months.", "long_term": "**Fifteen years of archived traffic** must be assumed exposed, which cannot be reversed. Long-lived devices and many registries in lower-income countries remain on the broken algorithms." } }, "history": [ { "edition": 2027, "rank": 10, "L2y": 1, "L10y": 3, "impact_systemic": 3, "impact_national": 4, "confidence": "low" } ], "changelog": [ { "version": "0.5.0", "date": "2026-10-09", "change": "Entered the Library in the second pass, proposed by the model panel." } ], "citation": "GINC (2027). Scenario S09 A cryptographic breakthrough invalidates digital trust, Scenario Library v0.5. scenarios.ginc.org/scenarios/cryptographic-trust-break" }