THE QUANTUM INTELLIGENCER

Bottom Line Up Front: A newly proven impossibility result demonstrates that any perfectly complete classical-message quantum key agreement protocol in the QROM can be broken by a polynomial-time classical eavesdropper, invalidating a broad class of potential post-quantum secure designs. Threat Identification: The threat is the theoretical vulnerability of all perfectly complete, multi-round key agreement protocols that rely on quantum-secure one-way functions in the QROM. Even with quantum queries by legitimate parties, an eavesdropper using only classical queries to the same oracle can recover the full key with certainty, given the public transcript (Li et al., CRYPTO '26; Austrin et al., CRYPTO '22). Probability Assessment: The threat is already realized in the theoretical domain as of 2026. The result is a mathematical proof, not a conjecture, and applies universally across round count, key length, and transcript size. It is therefore 100% likely to affect any protocol design falling within the specified class. Impact Analysis: The impact is high for cryptographic research and long-term standardization efforts. Protocols designed under the assumption that multi-round interaction provides security in the QROM are now provably insecure if they require perfect completeness. This forces a reevaluation of design paradigms, potentially narrowing the viable paths for quantum-resistant key exchange. Systems relying on such theoretical constructs for future-proofing may face unexpected obsolescence. Recommended Actions: 1) Redirect research toward protocols with statistical or computational completeness instead of perfect completeness. 2) Audit proposed post-quantum key exchange candidates for reliance on perfectly complete classical-message interactions in the QROM. 3) Update cryptographic guidelines and NIST-related documentation to reflect this impossibility result. 4) Invest in alternative quantum-safe primitives not based on black-box OWFs in the QROM. Confidence Matrix: Threat Identification – High (based on peer-reviewed proof); Probability Assessment – Certain (mathematical proof); Impact Analysis – High (broad implications for protocol design); Recommended Actions – Medium-High (dependent on adoption of affected models). —Ada H. Pemberley Dispatch from The Prepared E0