Quantum Computers Generate 70,000 Certified Random Bits In Seconds

A team of researchers from JP Morgan Chase, Quantinuum, and other institutions has demonstrated that quantum computers can produce "certifiably random" numbers, which could significantly enhance the security of various systems, including banking and voting mechanisms. Unlike traditional computers, which use algorithms to mimic randomness, quantum computers leverage the principles of quantum mechanics to generate truly random numbers. This breakthrough was published in Nature and involved the use of a 56-qubit trapped-ion quantum computer to generate over 70,000 certified random bits. The process, which took mere seconds per bit to create, would require the combined effort of four of the world's top supercomputers working nonstop to fake.

The verification of these random numbers was conducted by a group of supercomputers, confirming that there was no mathematical algorithm involved in their generation. This achievement marks a significant advancement in quantum computing, addressing a fundamental challenge in cybersecurity: creating random numbers that are provably unbiased and unpredictable. Traditional random number generation faces issues such as potential manipulation or predictability in entropy sources and weaknesses in the algorithms used by pseudo-random number generators. Quantum randomness, on the other hand, introduces a fundamentally different entropy source rooted in the intrinsic unpredictability of quantum mechanical processes.

Quantum computers use qubits, which can exist in multiple states simultaneously due to a phenomenon called superposition. When measured, these qubits produce genuinely random results because nature itself hasn't determined the outcome until observation occurs. The protocol used in this research involves a back-and-forth between quantum and classical computing. The quantum computer performs random circuit sampling, a method used to benchmark and demonstrate quantum advantage. The outputs generated by the quantum computer were then verified by classical supercomputers using cross-entropy benchmarking, confirming that they couldn't have been produced by classical means.

This verification process ensures that the random numbers weren't manipulated by anyone, including the quantum computer's manufacturers. The stakes for getting randomness right are high, as demonstrated by several dramatic examples of what happens when randomness fails. For instance, in 2010, Sony's PlayStation breach occurred because developers failed to use strong random number generation, allowing attackers to expose the private cryptographic key. More recently, the Polynonce attack exploited weak Bitcoin wallet randomness, leading to the theft of 140 Bitcoin. Another costly incident was the 2013 Android SecureRandom vulnerability, where weak entropy in Bitcoin wallet applications allowed attackers to steal private keys, draining millions of dollars in Bitcoin.

The implications of this breakthrough stretch across digital security and could open the doors for practical users of quantum computers. Better random numbers mean stronger encryption keys for everything from online banking to government applications, messaging apps, and social media. They could also make digital signature systems more secure, safer crypto wallets, and prevent data tampering. One particular use case for certified randomness is a trustless random beacon: a public service that regularly emits truly random numbers that no one can predict, manipulate, or fake. For blockchains, quantum-certified randomness can power truly fair and tamper-proof consensus algorithms, significantly strengthening platforms like Ethereum and Solana against manipulation.

Public lotteries, gambling sites, banking operations, marketing firms that do A/B testing, and bioresearch companies are among the businesses that could greatly benefit from using truly random number generation. Despite its promise, the technique is still not suitable for everyday use. The verification stage currently requires supercomputing power that most organizations lack, which means it is not worth the hassle to implement right now. However, the technology is already moving toward accessibility, with other players working on more sustainable paths. Quantinuum’s Jones suggests that the technology is already moving toward accessibility, with other players working on more sustainable paths. While the JPMC research required supercomputers for certification, Quantum Origin takes a different approach, leveraging Bell tests on a quantum computer to generate a quantum seed. Once the quantum seed is generated, it can be embedded into software and can upgrade any local random source to 'quantum' randomness.

The path to mainstream adoption appears promising, marking the first time experts believe quantum computing may have an actual mass application in the short term. Chip-scale quantum computers may continue to get cheaper and more resistant to noise, making it possible to add them to just about any device within this decade. For applications on the cloud, numbers generated by real quantum computers may be readily available as part of workloads. You may one day add quantum processing units (QPUs) for several functions, including random numbers. If this technique proves successful, we may eventually move toward an internet where spoofing attacks become mathematically impossible rather than just difficult, creating a fundamentally more secure digital world built on the weird quirks of quantum physics.

Ask Aime: How will quantum computers enhance financial security?