The age of quantum computing may have begun not with a flashy press conference but with an internet leak. According to a paper posted briefly–and presumably mistakenly–to a lab site, physicists at Google have used a quantum computer to perform a calculation that would overwhelm the world’s best conventional supercomputer. Although the specific computation has no known use, the result means that scientists have passed a milestone known as “quantum supremacy.”

“It’s a great scientific achievement,” says Chad Rigetti, a physicist and founder and CEO of Rigetti Computing in San Francisco, which is developing its own quantum computers. “Google called their shot,” he adds, noting that the company detailed exactly how it would demonstrate quantum supremacy a couple years ago. Greg Kuperberg, a mathematician at the University of California, Davis, calls the advance “a big step toward kicking away any plausible argument that making a quantum computer is impossible.”

According to the *Financial Times*, which broke the story, the paper appeared last week on the web site of NASA’s Ames Research Center in Moffett Field, California, some of whose researchers are authors on it. Readers downloaded the manuscript before it vanished, and it is circulating on the web. John Martinis, the physicist who leads Google’s quantum-computing effort in Santa Barbara, California, declined to comment on the paper, but others in the field think it is legitimate.

But such a computer’s real power comes from other quantum phenomena. For certain computational problems, all potential solutions can be thought of as quantum waves simultaneously sloshing among the qubits. Set things up right and those waves will interfere with one another so that incorrect answers cancel one another and the right answer pops out. Such interference should enable a full-fledged quantum computer to hack current internet encryption schemes by factoring the huge numbers that underlie them (*Science*, 23 August, p. 730.).

That feat would require thousands of qubits, so Martinis and colleagues conceived a problem on which a quantum computer with just dozens of qubits could best any conventional rival. The 53 qubits in their device consist of tiny circuits of superconducting metal that can be in a low-energy state to denote zero, a high energy state to denote one, or both at the same time–at least until measured, when such two-way states collapse one way or the other. The researchers then made pairs of qubits interact in various ways through a fixed but random set of operations.

Taken as a group, the qubits act as a number generator, outputting any number between 0 and 2^{53}. Thanks to quantum interference caused by the operations, some numbers should show up more often than others. And as the number of qubits grows, calculating that uneven distribution of outputs would become overwhelmingly difficult for an ordinary computer. So if experimenters see the telltale unequal pattern of outputted numbers, they have evidence their quantum device calculated something a conventional computer cannot.

As with any quantum computing effort, the key was to preserve the qubits’ delicate quantum states throughout the process. If they fuzz out then all outputs become equally likely. But the Google team reports that they managed to see the telltale pattern in the generated numbers. To prove the pattern wasn’t just noise, they compared the results for smaller trials and subgroups of the qubits to supercomputer simulations. They couldn’t do that for the biggest instances of the problem, however. What the quantum computer could do in a little over 3 minutes would take a supercomputer 10,000 years to reproduce, they estimate.

Some researchers say the demonstration isn’t so much a computation as an effort to cook up a quantum state that’s hard to simulate. “Quantum computers are not ‘supreme’ against classical computers because of a laboratory experiment designed to essentially … implement one very specific quantum sampling procedure with no practical applications,” says Dario Gil, director of research for IBM, which is also developing machines with superconducting qubits.

The Google computer also lacks the ability to correct errors, which may be key to making a full-fledged quantum computer. That requires encoding a single, more stable “logical” qubit in several less reliable “physical” ones, to enable the machine to maintain quantum states much longer, Kuperberg explains. Rigetti, however, notes that Google’s achievement may put the company in an ideal position to demonstrate such error-correction, too.

Gil voices another worry long held by many the field: That after all the hype surrounding quantum supremacy, quantum computing may experience a letdown like the one that plagued the field of artificial intelligence from the 1970s until the current decade, when technology finally caught up with aspirations. However, Google researchers appear to be optimistic. In the leaked paper, the 76 authors conclude: “We are only one creative algorithm away from valuable near-term applications.”

[“source=sciencemag”]