Good. That's their job. I'm not worried about the NSA using quantum computing, as fiscal realities dictate that it would have to be narrowly targeted at a small subset of the encrypted information out there. I'm fine with them recovering plaintext from pgp-encrypted emails sent between suspected al-Qaeda members. I'm not fine with them break encryption en masse and compromising the integrity of the Internet.
I thought the whole point of using quantum computing to break crypto, is that you can break encryption (e.g. RSA private keys) en masse for the same or less cost than traditional computing requires to break them one-at-a-time.
