A cryptographic breakthrough invalidates digital trust
How far each nation’s capability index falls when this scenario’s load is applied to its capability scores, after its own buffers absorb what they can.
Third illustrative run, on the second-pass scenario set. The capability scores are candidate ratings and the test settings were drafted with the scenario records in the second pass; neither has been adopted. Scores are from the GINC National Capability Index 2026, which describes them as candidate ratings. Exposure is set nation by nation from the CIA World Factbook 2025 and the scenario’s regional exposure. Results show the method working on real scores; they are not findings about any nation. How the tests work.
- Typical nation
- −0.63
- median change in index, points
- Hardest hit
- −0.95
- North Korea
- Lose a domain band
- 158
- of 197 nations
- Worth of best practice
- +0.26
- mean points recovered over current plans
Change in index, by region
One dot per nation. The bar marks each region’s mean. Further left is a larger fall.
- Region mean
Does capability protect?
Each nation’s baseline index against its fall. Stronger nations absorb more of the shock, so they sit higher; so do nations with low exposure.
- North America
- Europe
- China
- Indo-Pacific
- South Asia
- Gulf and Middle East
- Africa
- Latin America and Caribbean
- Russia and Eurasia
Where the load lands
Mean change in each capability domain across all nations.
Capability domainMean change, points
Information & Influence
Governance & Integrity
Financial Strength
National Security
Critical Technology
Strategic Infrastructure
Trade & Investment
Production & Innovation
Human Capital
−1.06
−0.99
−0.92
−0.78
−0.61
−0.47
−0.45
−0.40
0.00
What policy is worth
The 20 hardest-hit nations under three policy responses. The distance from no response to current plans is what current buffers absorb; from current plans to best practice is what best practice would add.
All 197 nations
Rank shift is the change in the nation’s place among all nations once every index is stressed: up means it held up better than its neighbours. The weakest point is the capability left lowest among those the scenario singles out.
197 of 197 nations
Nation | Region | Exposure | Baseline | Stressed | Change | % | Rank shift | Bands lost | Absorbed | Weakest point |
|---|---|---|---|---|---|---|---|---|---|---|
| North Korea | Indo-Pacific | High 1.00 | 4.26 | 3.31 | −0.95 | −22.3 | ▼ 9 | 25 · 3d | 18% | Justice System & Fundamental Rights 0 · Inception |
| Kuwait | Gulf and Middle East | High 0.89 | 7.51 | 6.63 | −0.88 | −11.7 | ▼ 4 | 25 · 1d | 22% | Connectivity, Cyber & Trust Technologies 0.5 · Inception |
| Palestine | Gulf and Middle East | High 0.85 | 3.72 | 2.84 | −0.87 | −23.5 | ▼ 8 | 17 · 3d | 11% | Connectivity, Cyber & Trust Technologies 0 · Inception |
| Kyrgyzstan | Russia and Eurasia | High 0.84 | 4.77 | 3.91 | −0.86 | −18.1 | ▼ 4 | 20 · 1d | 14% | Connectivity, Cyber & Trust Technologies 0 · Inception |
| Jordan | Gulf and Middle East | High 0.88 | 7.50 | 6.65 | −0.85 | −11.3 | ▼ 2 | 22 · 1d | 23% | Connectivity, Cyber & Trust Technologies 1.8 · Inception |
| Bahrain | Gulf and Middle East | High 0.88 | 7.32 | 6.47 | −0.85 | −11.6 | ▼ 4 | 24 · 1d | 23% | Connectivity, Cyber & Trust Technologies 0.6 · Inception |
| Montenegro | Europe | High 0.87 | 6.35 | 5.49 | −0.85 | −13.5 | ▼ 2 | 16 · 3d | 21% | Connectivity, Cyber & Trust Technologies 0.3 · Inception |
| Monaco | Europe | High 0.97 | 5.91 | 5.07 | −0.85 | −14.3 | ▼ 4 | 16 · 2d | 21% | Connectivity, Cyber & Trust Technologies 0 · Inception |
| Bosnia & Herzegovina | Europe | High 0.84 | 5.80 | 4.95 | −0.85 | −14.7 | ▼ 5 | 14 · 4d | 18% | Connectivity, Cyber & Trust Technologies 0.1 · Inception |
| Iraq | Gulf and Middle East | High 0.80 | 4.69 | 3.84 | −0.85 | −18.2 | ▼ 4 | 23 · 1d | 14% | Connectivity, Cyber & Trust Technologies 0 · Inception |
| Lebanon | Gulf and Middle East | High 0.80 | 4.66 | 3.81 | −0.85 | −18.3 | ▼ 5 | 24 · 3d | 15% | Financial Stability & Crisis Management 0 · Inception |
| Uzbekistan | Russia and Eurasia | High 0.82 | 5.92 | 5.08 | −0.84 | −14.3 | ▼ 4 | 25 · 3d | 17% | Connectivity, Cyber & Trust Technologies 0 · Inception |
| Cyprus | Europe | High 0.91 | 8.51 | 7.68 | −0.83 | −9.8 | 0 | 24 · 2d | 27% | Connectivity, Cyber & Trust Technologies 1.6 · Inception |
| North Macedonia | Europe | High 0.85 | 6.61 | 5.78 | −0.83 | −12.6 | ▼ 1 | 19 · 2d | 21% | Connectivity, Cyber & Trust Technologies 0.4 · Inception |
| Kosovo | Europe | High 0.83 | 4.70 | 3.87 | −0.83 | −17.6 | ▼ 4 | 17 | 14% | Connectivity, Cyber & Trust Technologies 0 · Inception |
| Malta | Europe | High 0.92 | 8.89 | 8.07 | −0.82 | −9.2 | 0 | 19 · 4d | 30% | Connectivity, Cyber & Trust Technologies 2.2 · Inception |
| Kazakhstan | Russia and Eurasia | High 0.87 | 8.14 | 7.32 | −0.82 | −10.1 | ▼ 2 | 25 · 3d | 25% | Connectivity, Cyber & Trust Technologies 2.3 · Inception |
| Belarus | Russia and Eurasia | High 0.85 | 6.90 | 6.09 | −0.82 | −11.8 | ▼ 2 | 21 · 5d | 25% | Justice System & Fundamental Rights 1.3 · Inception |
| Brunei | Indo-Pacific | High 0.84 | 5.60 | 4.77 | −0.82 | −14.7 | ▼ 3 | 21 · 2d | 18% | Connectivity, Cyber & Trust Technologies 0 · Inception |
| Oman | Gulf and Middle East | High 0.85 | 8.03 | 7.22 | −0.81 | −10.1 | ▼ 1 | 21 · 4d | 25% | Connectivity, Cyber & Trust Technologies 1.1 · Inception |
| Georgia | Russia and Eurasia | High 0.84 | 7.55 | 6.74 | −0.81 | −10.7 | ▼ 1 | 23 · 2d | 24% | Connectivity, Cyber & Trust Technologies 1.3 · Inception |
| Armenia | Russia and Eurasia | High 0.83 | 6.65 | 5.84 | −0.81 | −12.2 | 0 | 11 · 3d | 22% | Connectivity, Cyber & Trust Technologies 1.5 · Inception |
| Moldova | Russia and Eurasia | High 0.84 | 6.34 | 5.53 | −0.81 | −12.8 | 0 | 20 · 4d | 22% | Connectivity, Cyber & Trust Technologies 1.2 · Inception |
| Albania | Europe | High 0.81 | 6.13 | 5.32 | −0.81 | −13.2 | ▼ 4 | 11 · 5d | 18% | Connectivity, Cyber & Trust Technologies 0 · Inception |
| Fiji | Indo-Pacific | High 0.82 | 5.16 | 4.36 | −0.81 | −15.6 | ▼ 5 | 19 · 1d | 15% | Connectivity, Cyber & Trust Technologies 0 · Inception |
Showing 1–25 of 197 nations · page 1 of 8
Settings of this run
- Load
11 capability groups singled out, 64 loaded in all, of 73. A band on the capability scale is three points wide, so a High load moves a fully exposed, unprotected capability down one band. A capability group that the scenario does not single out takes its domain's load one level lower.
- Singled out
- Connectivity, Cyber & Trust Technologies· High
- Communications & Digital Infrastructure· Medium
- Financial Infrastructure· Medium
- Intelligence & Assessment· High
- Cyber & Electromagnetic Operations· High
- Diplomatic Statecraft & Global Networks· High
- Information Environment & Strategic Communication· High
- Justice System & Fundamental Rights· High
- Government Effectiveness & Public Administration· High
- Financial Stability & Crisis Management· High
- Digital & Services Trade· Medium
- Buffers
- Connectivity, Cyber & Trust Technologies
- Quantum Technologies
- Cyber & Electromagnetic Operations
- National Resilience & Crisis Management
- Regulatory Governance & Strategic Controls
- Digital & AI Competence
Absorption is the nation's mean score on the scenario's buffer capabilities as a share of the top of the scale, times 0.75: a nation at the frontier on every buffer absorbs three quarters of the shock.
- Exposure
regional exposure (40%); internet users as a share of population (35%); services as a share of gdp (25%). Exposure is set nation by nation: a weighted blend of indicators from the 2025 World Factbook and the scenario's regional exposure. Where a nation does not report an indicator, its weight passes to the others.
- Likelihood
0 per cent over three years and 3 per cent over ten, as used in the vulnerability index.