up:: For Press

Charts you can reuse

Every chart here is free to republish, including commercially, and you don’t need to ask. Attribution is the only condition.

Each one comes in 4 formats: a vector PDF for print, an SVG for redrawing, a PNG at 300 dpi, and the underlying data as a CSV so you can check the numbers or rebuild the figure yourself.

The short version:

  • Free to republish with attribution, in any outlet, commercial or not.
  • The credit line is Chart: LaMarr Labs Post-Quantum Field Guide. The primary source is already printed on every image.
  • Built at one newspaper column, so the type is legible at roughly 4 inches wide without rescaling.
  • The CSV beside each chart carries the qualifiers that wouldn’t fit on the image, including what the figure does not establish.
  • Redraw, restyle, crop, or translate them. The one thing to avoid is changing the numbers while keeping the source line.

What exactly am I allowed to do with these?

Republish them, in print or online, in a commercial outlet or a non-commercial one. Redraw them in your own house style. Translate the labels. Crop them. Pull the CSV and build something different from the same numbers.

The condition is attribution: Chart: LaMarr Labs Post-Quantum Field Guide. If your format allows a link, the one to use is https://fieldguide.lamarrlabs.com.

Every source named in a caption below is indexed with a direct link to the original document at The primary documents behind every claim, and every figure with the wording that states it accurately at Every figure and where it comes from.

Each image already carries its own primary source, printed small at the bottom. That line matters more than the credit to this Guide, because it points at the original document rather than at an intermediary, so please keep it when you can.

The one request: if you change a number, redraw the figure and remove the source line. A source line should always match the data printed beside it.

If you need a variant that doesn’t exist, a different crop, a specific figure isolated, or the same data at a different aspect ratio, email addie@lamarrlabs.com and you’ll get it.

Which chart do I want?

If you’re writing aboutUse
How close the machine isThe falling estimate · What 26 experts expect
What actually breaksWhat breaks and what survives · Where a connection breaks
Why it’s urgent nowThe 2 clocks · Data lifetime against migration
Government deadlinesThe national deadlines
What’s already shippedThe deployment timeline
Personal data and DNAThe 23andMe amplification · The familial reach
Money and costBitcoin’s exposed keys · The Y2K comparison

The charts

How close is the machine?

Bar chart of the qubits estimated as necessary to break RSA-2048: 20 million in 2019, under 1 million in 2025, and the machines actually built, which are in the low thousands and too small to appear on the same axis.

Source: Gidney and Ekerå, Quantum 5, 433 (2021); Gidney (2025). PDF · SVG · PNG · Data Diverging bar chart showing how 26 surveyed experts rated the likelihood of a machine able to break RSA-2048, across 5 timeframes, with confidence migrating from the least confident bins at 5 years to the most confident at 30.

Source: Mosca and Piani, Quantum Threat Timeline Report 2025, Global Risk Institute, Appendix A.4. PDF · SVG · PNG · Data

What actually breaks?

Two-part reference showing what breaks completely under quantum attack, namely RSA, Diffie-Hellman and elliptic curve, against what survives with a larger size, namely AES-256 and SHA-256, with AES-128 named as the exception.

Source: NIST IR 8105 (2016); NSA CNSA 2.0 FAQ. PDF · SVG · PNG · Data Diagram of the 6 steps of opening an encrypted connection, with step 2, agreeing a shared secret, and step 3, the server proving its identity, marked as breaking, and step 5, scrambling your content, marked as surviving.

Source: Shor, SIAM J. Computing 26(5), 1997; NIST IR 8105. PDF · SVG · PNG · Data

Why is it urgent now?

Diagram of 2 clocks running in opposite directions from the moment a capable machine exists. Confidentiality runs backward over data already recorded, and authenticity runs forward over signatures not yet made.

Source: CISA, NSA and NIST joint advisory (21 August 2023); NIST IR 8105. PDF · SVG · PNG · Data Stacked bar chart showing how long each kind of data must stay confidential plus 10 years to migrate, against the 15-year mark where a majority of surveyed experts first rate a capable machine likely or better.

Source: 45 CFR 164.316; 17 CFR 240.17a-4; EO 13526; Freddie Mac; NCSC, Canada TBS and EU NIS CG schedules; Global Risk Institute. PDF · SVG · PNG · Data

What have governments actually required?

Timeline of each government's post-quantum schedule for its own systems, running from first dated obligation to completion, with India finishing in 2029 ahead of Australia, the United States, Canada, the United Kingdom and the European Union.

Source: India DST task force (4 Feb 2026); EO 14412; NSA CNSA 2.0 FAQ; Canada TBS; NCSC; EU NIS CG; ASD ISM. PDF · SVG · PNG · Data Vertical timeline of when post-quantum encryption actually shipped, from Cloudflare in October 2022 through Signal, Apple, Chrome and Firefox, with the NIST standards of 13 August 2024 marked as the point where the algorithm changed.

Source: NIST, Signal, Apple, Google, Mozilla, Microsoft and Cloudflare announcements. PDF · SVG · PNG · Data

What does it mean for a person?

Bar chart contrasting 14,000 accounts the attacker entered against 6.9 million people whose data was taken, an exposure roughly 490 times larger than the intrusion.

Source: California and Texas Attorneys General. PDF · SVG · PNG · Data Ten dots, 6 of them filled, showing that about 6 in 10 genealogy database searches for a person of European descent in the United States already return a third cousin or closer.

Source: Erlich, Shor, Pe’er and Carmi, Science 362(6415), November 2018. PDF · SVG · PNG · Data

What about money?

Single bar showing that about 25% of all Bitcoin supply, roughly 4 million BTC, sits in addresses whose public key is visible on the blockchain, against the remaining 75% that does not.

Source: Deloitte, Quantum computers and the Bitcoin blockchain. PDF · SVG · PNG · Data Bar chart comparing 3 spending figures: Y2K across US government and business at 100 billion ranging to 225 billion, Y2K in the US federal government at 8.34 billion, and the post-quantum migration of prioritized US federal civilian systems at 7.1 billion.

Source: U.S. Senate Special Committee S. Prt. 106-42; OMB, July 2024. PDF · SVG · PNG · Data

Questions people ask

Do I need to ask permission? No. Republish them.

Can my commercial outlet use them? Yes, commercial use included.

What exactly do I credit? Chart: LaMarr Labs Post-Quantum Field Guide, plus the primary source already printed on the image.

Can I redraw it in our house style? Yes, and the SVG and the CSV are both there for that. The attribution still applies to the redrawn version, because the sourcing work is what you’re using.

Why is there a CSV? So you can check the numbers rather than take them on trust, and so you can rebuild the figure without tracing pixels. Each one also carries the qualifiers that wouldn’t fit on the image, including what the figure does not establish.

Why are they so small? They’re designed at one newspaper column, roughly 4 inches, which is the size they’re most likely to be printed at. Designing at that size means the type is legible without rescaling. The PDF and SVG are vector, so they scale up cleanly for a full-page or on-screen use.

Can I get a figure that isn’t here? Email and ask. If it can be sourced properly it can be built.

Are these AI-generated? No. Each is drawn from a named primary document, and the data behind it is in the CSV next to it.

Where to go next


Last verified 2026-08-02 · Maintained by Addie LaMarr, LaMarr Labs.