>>153879
If the government has access to a useful quantum computer with a reasonable amount of qubits, they would be able to attack PGP messages pretty easily - while the bulk of the encryption is symmetric key and thus not easily targeted by quantum algorithms currently, that key is transmitted by encrypting it with the target's public key, and that would be easily attacked with a useful quantum computer, yielding the per-message key.