Google Quantum AI white papers estimated in March 2026 that breaking Bitcoin's elliptic curve cryptography would require 1,200 to 1,450 logical qubits or under 500,000 physical qubits