Bennett and Brassard Win Turing Award for Work That Could Outlast the Internet Itself

Charles Bennett and Gilles Brassard spent decades working on a problem most people did not know existed. In 1984, the two researchers published a protocol now known simply as BB84, a method for distributing cryptographic keys using the principles of quantum mechanics. At the time, it read more like theoretical physics than computer science. Forty years later, the Association for Computing Machinery has awarded them the Turing Award, widely regarded as the Nobel Prize of computing, for that foundational contribution to quantum information science.

The recognition is overdue in the way that only the most consequential ideas tend to be. BB84 did not solve a problem that existed yet. It anticipated one. The protocol exploits a core property of quantum mechanics: measuring a quantum system disturbs it. If an eavesdropper intercepts a quantum key transmission, the act of interception leaves a detectable trace. This is not a feature of clever engineering. It is a law of physics. That distinction matters enormously, because it means the security guarantee does not depend on computational difficulty, the way most modern encryption does, but on the structure of reality itself.

The timing of the award is not coincidental. The cryptographic infrastructure that secures global banking, government communications, and private data today rests almost entirely on mathematical problems that are hard for classical computers to solve, particularly the factoring of large numbers. That hardness is the lock. But quantum computers, once they reach sufficient scale and stability, are expected to break that lock. The threat has a name inside the security community: "harvest now, decrypt later." State-level actors are already believed to be collecting encrypted communications today, storing them, and waiting for quantum hardware capable of cracking them retroactively. Sensitive data with a long shelf life, think diplomatic cables, medical records, or infrastructure schematics, is already at risk in a forward-looking sense.

Bennett and Brassard's work offers a fundamentally different kind of answer. Quantum key distribution, the family of protocols that BB84 initiated, does not ask you to trust that a math problem is hard. It asks you to trust physics. That is a much more durable foundation, and the gap between the two approaches is only widening as quantum hardware matures.

The practical deployment of quantum cryptography has moved well beyond the laboratory. China launched the Micius satellite in 2016 and used it to demonstrate quantum key distribution over intercontinental distances. Several European nations are investing in quantum communication networks as part of broader digital sovereignty strategies. In the United States, the National Institute of Standards and Technology finalized its first set of post-quantum cryptographic standards in 2024, a parallel effort to harden classical systems, but one that acknowledges the quantum threat is no longer hypothetical.

There is a systems-level irony embedded in all of this that rarely gets discussed. The same quantum properties that make BB84-style protocols so secure also create new asymmetries in global power. Quantum communication infrastructure is expensive, physically complex, and currently dependent on specialized hardware that only a handful of nations can manufacture at scale. If quantum-secured networks become the gold standard for sensitive communications, access to that standard will not be evenly distributed. Countries and institutions that cannot afford the infrastructure may find themselves locked into classical encryption that is increasingly vulnerable, while wealthier actors operate behind a quantum shield. The result could be a two-tier global communications order, not defined by bandwidth or connectivity, but by the depth of physical security underlying the signal.

Bennett and Brassard did not design that outcome. They designed a protocol. But foundational ideas have a way of propagating through systems in ways their authors never anticipated, and the geopolitical architecture of secure communication is now being quietly rebuilt on the scaffolding they erected in 1984. The Turing Award acknowledges a scientific achievement. What it cannot fully capture is the degree to which that achievement is still unfolding, in satellite networks, standards bodies, and the classified server rooms of governments that are only now beginning to reckon with what these two researchers understood four decades ago.

The most important encryption systems of the next century may not be broken by faster computers. They may simply be replaced by something that cannot be broken at all, and the lineage of that replacement runs directly through a paper that almost no one outside quantum physics read when it was first published.