→ cracking time: An optimized superconducting device could break keys in minutes because the circuit is only ~100M Toffoli gates; at ~10 µs per Toffoli on superconducting hardware, Shor runtime is on the order of 1,000 seconds