Most popular public-key algorithms can be efficiently broken by a sufficiently powerful quantum computer.

From a security point of view, the possible emergence of a large-scale quantum computer in the not-so-far future can then no longer be ignored. This threat has potentially an immediate effect on the security of our most sensitive data. Encrypted long-life secrets (such as medicals records) can be collected, stored today and decrypted once quantum computers become available.

"We do not expect to “pick a winner” • Ideally, several algorithms will emerge as ‘good choices’" Dustin Moody.

Quantum computing risk cannot be ignored. "Without cryptography, we essentially need to “unplug” from the ICT infrastructure, and stop using untrusted parties and media. This is simply not practical for the majority of applications, including anything involving a financial transaction that uses real-time communication (credit card purchases, money transfers, online banking, etc.), online communication (e-mail, texting, social media, etc), online advertising, e-health, and so on." M. Mosca.

Aug 2015 : "“IAD will initiate a transition to quantum resistant algorithms in the not too distant future."