It has nothing to do with &quot;reversing&quot; hashes.  The attacker would use the quantum computer to determine the CA&#x27;s private key (e.g. by factoring the RSA modulus using Shor&#x27;s Algorithm), and would then be able to sign any hash they want.  No need to attack the hash function; in fact hashes remain secure under quantum computing.