At&t and ericsson sound the quantum alarm: tomorrow’s 5g/6g grid must be rebuilt today
One morning, perhaps next year, a lab in Shenzhen or Boston will flip the switch on a fault-tolerant quantum computer. Minutes later every RSA lock on the planet—banking, messaging, the SIM card in your pocket—becomes a toy puzzle. AT&T refuses to wait for that headline. In a joint paper released overnight with Ericsson, the carrier demands the mobile industry begin swapping classical crypto for post-quantum algorithms now, before 6G specs are even frozen.
The document, bluntly titled “Security in the AI-driven, open 5g/6G era,” lands like a brick inside the standards bubble. It sketches a network where open RAN radios, AI controllers and cloud-native cores share memory lanes with qubit-ready eavesdroppers. Current 5G traffic, the authors warn, is already exposed to “store-now, decrypt-later” dragnets; nation-state actors are hoarding encrypted radio sessions today so they can batch-crack them once the hardware arrives.
Why lattice math suddenly matters to your phone bill
Traditional public-key schemes lean on factoring large primes—child’s play for a 4 000-logical-qubit machine. Post-quantum candidates such as CRYSTALS-Kyber and Dilithium hide secrets inside high-dimensional lattices that stump even a universal quantum computer. The catch: lattice keys are fatter, signatures slower, silicon hungrier. Ericsson calculates that a single base-station performing hand-over authentication could see CPU load spike 18 % if the crypto layer is naïvely retrofitted. The paper urges chipset makers to bake lattice acceleration into radios scheduled for 2026 volume production, a timeline that overlaps with the first 3GPP Release-19 freeze.
AT&T’s CISO Rich Baich told me the carriers’ old habit of “security-by-obscurity dies with openness.” Open RAN fronthaul interfaces, already shipping in live U.S. macros, expose fiber packets that were once buried inside vendor-black boxes. Add AI traffic schedulers that rewrite beam-forming tables in real time and you get a surface so wide that “every contributor—tower owner, cloud landlord, handset ODM—must carry a crypto budget,” Baich said.
No single player can foot the coming bill
Ericsson’s Mikko Karikytö wants the cost socialized. He proposes a shared quantum-risk tax baked into spectrum auction proceeds: regulators would siphon a tiny slice of license fees into a neutral fund that reimburses operators for hardware swaps. It’s a Nordic-style idea, easy to mock until you price a nation-wide PQC retrofit at roughly $3 billion for a mid-size EU country.
Google, separately, is already grafting hybrid key agreement into Android 17 beta so devices can negotiate Kyber-encrypted sessions when the tower supports it. The message from both camps is identical: the transition is not a fork-lift upgrade you schedule for 2032; it is a rolling firmware wave that starts with the next 5G stand-alone core you buy.
The uncomfortable footnote: nobody knows which lattice scheme will survive the next decade of cryptanalysis. NIST’s round-four bake-off could still implode, forcing a second rip-and-replace cycle. Carriers hate uncertainty, but as Baich put it, “sitting still is the one option that guarantees failure.”
So while headlines obsess over ChatGPT writing sonnets, the deeper rewrite is happening inside base-station firmware commits you will never see. If the carriers blink, the quantum morning arrives and your end-to-end encrypted chat becomes a public artifact overnight. AT&T just bet its capex budget that no one will tolerate that surprise.