Shor's algorithm can break RSA, Diffie-Hellman, and elliptic curve DH. Some researchers believe it can be generalized to break lattice-based crypto.

QCs also useful for quantum simulations.