The researcher warned a worst-case cryptographic break could arrive within months, while users do not need to take immediate action.