12. Quantum attacks on cryptography
Shows how Shor’s algorithm threatens factoring and discrete logarithms, while Grover’s algorithm changes symmetric-key security more modestly. Resource estimates and “harvest now, decrypt later” scenarios turn the threat into practical risk decisions.