**Factoring and discrete logarithm** (Shor's algorithm): exponential speedup. Breaks RSA, Diffie-Hellman, and elliptic curve cryptography. - **Unstructured search** (Grover's algorithm): quadratic speedup. Applies to any brute-force search. - **Quantum simulation** (Feynman's original motivation): s