Scotland on front foot in quantum revolution as clock ticks down to ‘Q-Day’
“I didn’t expect, in my twenties, to be arguing that a harbour in Shetland might end up guarding some of the world’s more sensitive data”
Somewhere right now, someone is stealing encrypted data they cannot yet access. Not because the theft has failed, but because they do not need to succeed today. Encrypted bank transfers, health records, defence communications: all of it can be copied and shelved, awaiting the day a computer exists that can finally break it open. Much of this data will still hold meaningful value in the future. Security researchers call this "harvest now, decrypt later". That day has a name too: Q-Day. And it is closer than most people in Scotland realise.
I'm a physicist, born and raised in Scotland, and from a lab in Edinburgh I work as the quantum programme manager at Rhea Space Activity UK. It’s my job to think about the math problems that currently keep the digital world locked. Almost all encryption relies on the same assumption: that factoring enormous numbers is too hard for any computer to do quickly. For the past 50 years, the world’s most important data from online banking, NHS logins and highly sensitive communications between our security services and our allies have used various methods of encryption to protect their privacy. To open these digital doors, you would need a different key each time, but what if someone created the perfect lockpicking set? That’s where quantum computing comes in and Q-day is the day that key becomes functional.
Quantum computers use the behaviour of subatomic particles to solve certain problems, including exactly the kind of factoring problem that encryption depends on, far faster than any ordinary machine. Google's own quantum researchers now put Q-Day as early as 2029. The UK's National Cyber Security Centre has told critical industries to be off vulnerable encryption by 2031, with full migration by 2035. The US National Security Agency's deadline for sensitive government systems is 2027. These aren't predictions from a science fiction writer. They're the working timelines of the agencies whose job is to defend the data.


Encryption upgrades take years to roll out across an economy. But those who would steal this data, don't need to wait for that timeline. Anything that needs to stay secret for the next decade, whether that's intellectual property, defence communications, medical records, or the encrypted backbone of financial markets, is exposed from the moment a working quantum computer switches on, whenever that happens.
At Rhea Space Activity UK, this isn't the first time we've had to rebuild something everyone assumed was solved. That's more or less the company's whole reason for existing. Long before quantum computers were a headline, we were working on how you navigate without GPS in places where GPS can be jammed or simply doesn't reach, and how you get a signal across a genuinely long distance, space to ground, ship to shore, without radio interference or an adversary listening in. Encryption is the third act of the same problem: how do you keep something secret when the method you've always used to keep it secret stops working. Navigation, communication, security: three of the oldest problems there are, and we keep finding out they aren't finished being solved.
For encryption, our answer is quantum key distribution, or QKD: exchanging encryption keys encoded in the quantum states of individual photons of light rather than in a mathematical puzzle. Try to intercept those photons and you physically disturb them, in a way the sender and receiver can detect. It isn't secure because the sums are hard to do. It's secure because listening in breaks a law of physics, and that doesn't change no matter how powerful a computer someone builds.
We're building this into real infrastructure, not just laboratory demonstrations. Our team is developing the Shetland Communications Optical Terminal, a laser ground station using QKD to secure data links between satellites and the ground. Shetland isn't a random choice. It's one of the best-positioned sites in Europe for a satellite optical ground station, its telecommunications links have already been badly exposed by undersea cable failures, and the islands sit at the edge of a fast-growing Arctic satellite communications market. Built quantum-secure from the outset, a facility like this turns an old resilience problem into new strategic ground for Shetland, and for Scotland's claim on the next era of space infrastructure.


I didn't expect, in my twenties, to be arguing that a harbour in Shetland might end up guarding some of the world's more sensitive data. But that's where this is heading, and it needs Scottish investment now, before the migration deadlines arrive and everyone is trying to move at once.
Governments in Europe must begin preparing for Q-Day and in the UK and especially in Scotland, we have the homegrown brain-power to prepare for this challenge - we just need the political will and financial backing.
Q-Day is already a planning assumption inside the world's biggest tech companies and cyber-security agencies. Scotland has the science, the talent, and now the geography to be part of building what comes after the encryption we've relied on for 50 years. The only real question is whether we rise to this challenge while there is still time left.
Eden Ferguson, quantum programme manager, Rhea Space Activity UK
Comments
Want to join the conversation? Please or to comment on this article.