The Quantum Clock is Ticking: Google Accelerates Post-Quantum Cryptography Deadline

The future of digital security is undergoing a rapid and potentially disruptive shift. Google, a key player in both encryption technology and the development of quantum computers, has dramatically shortened the timeline for migrating to post-quantum cryptography (PQC). This move signals a heightened urgency in the face of increasingly powerful quantum computing capabilities and the looming threat to current encryption standards. The implications for businesses, governments, and individuals are profound, demanding immediate attention and proactive planning.

For years, the industry has largely operated under the guidance of the National Institute of Standards and Technology (NIST), which initially projected a 2030 deadline for deprecating vulnerable algorithms and a full transition by 2035. However, Google announced on Wednesday a revised target of 2029 for PQC migration, prioritizing authentication services and urging its engineering teams to align accordingly. This acceleration underscores a growing consensus: the quantum threat is no longer a distant possibility, but a rapidly approaching reality.

<p>Traditional asymmetric encryption, the bedrock of secure online communication, financial transactions, and website security, relies on mathematical problems that are exceedingly difficult for classical computers to solve. However, quantum computers, leveraging the principles of quantum mechanics, possess the potential to break these algorithms with relative ease. Specifically, Shor’s algorithm, designed for quantum computers, poses a significant threat to widely used encryption methods like RSA.</p>

<p>The speed at which this threat is materializing is startling. Jordan Kenyon, chief scientist in the quantum practice at Booz Allen Hamilton, explains that initial estimates projected the need for 20 million qubits to break RSA encryption. “Recent results have shrunk those requirements down to as little as around 100,000 qubits,” she notes. This isn’t solely due to advancements in quantum hardware; improvements in error correction and algorithmic efficiency are also playing a crucial role. The magnitude of this change is undeniable.</p>

<p>Google’s own estimates reflect this accelerating timeline. In 2019, the company estimated 20 million qubits were needed to compromise RSA. By May 2025, that figure was revised down to 1 million.  More recently, researchers at Australia’s Iceberg Quantum, in a pre-print report, suggested that only 100,000 physical qubits are now required. <a href="https://arxiv.org/abs/2602.11457" target="_blank" rel="noreferrer noopener">This research</a> dramatically shortens the perceived window of safety.</p>

<p>Fortunately, NIST has already finalized four post-quantum cryptography algorithms designed to withstand attacks from quantum computers, and recently selected a fifth. <a href="https://www.nist.gov/news-events/news/2025/03/nist-selects-hqc-fifth-algorithm-post-quantum-encryption" target="_blank" rel="noreferrer noopener">These algorithms</a> represent a crucial step forward in securing our digital future. However, adoption remains a significant challenge. According to the Post Quantum Cryptography Coalition, widespread implementation of these standards is lagging. <a href="https://pqcc.org/learn-more/state-of-the-migration/" target="_blank" rel="noreferrer noopener">Their analysis</a> reveals a concerning gap between standardization and real-world deployment.</p>

<div style="background-color:#fffbe6; border-left:5px solid #ffc107; padding:15px; margin:20px 0;"><strong>Pro Tip:</strong> Begin a cryptographic inventory *now*. Understanding which algorithms your organization uses and where they are deployed is the first, and most critical, step in preparing for the quantum era.</div>

<h3>The State of PQC Readiness: A Concerning Picture</h3>

<p>The lack of preparedness is widespread. The Trusted Computing Group’s research indicates that a staggering 91% of businesses do not have a roadmap in place to address quantum threats.  Furthermore, 80% report that their existing cryptographic libraries and hardware security modules are not yet compatible with PQC integration, and only 39% have even begun assessing their PQC compliance readiness. <a href="https://www.networkworld.com/article/4117438/quantum-computing-is-getting-closer-but-quantum-proof-encryption-remains-elusive.html" target="_blank" rel="noreferrer noopener">These statistics</a> paint a stark picture of the challenges ahead.</p>

<p>Google’s accelerated timeline is a wake-up call.  Michela Menting, an analyst at ABI Research, emphasizes that this move will likely compel other hyperscalers, such as Microsoft and AWS, to follow suit.  “It’s not a side project anymore,” she warns. “They really can’t afford to watch and wait anymore.”</p>

<p>The threat isn’t merely theoretical. Google highlights the risk of “store now, decrypt later” attacks, where malicious actors are already collecting encrypted data with the intention of decrypting it once quantum computers become powerful enough. <a href="https://blog.google/innovation-and-ai/technology/safety-security/the-quantum-era-is-coming-are-we-ready-to-secure-it/" target="_blank" rel="noreferrer noopener">Kent Walker, president of global affairs at Google and Alphabet</a>, underscores this urgency, stating that attackers are actively preparing for the quantum future.</p>

<p>Gartner’s research further emphasizes the need for action, revealing that 61% of organizations lack complete visibility into their cryptographic systems. <a href="https://www.gartner.com/en/documents/7290130" target="_blank" rel="noreferrer noopener">Gartner recommends</a> a comprehensive cryptographic inventory, investment in cryptographic agility, the establishment of a cryptographic center of excellence, and prioritization of PQC migration for sensitive assets.</p>

<p>Are organizations adequately prepared to navigate this complex transition? What resources are needed to accelerate PQC adoption across industries?</p>

<div>
  <details>
    <summary>What is post-quantum cryptography (PQC)?</summary>
    <p>Post-quantum cryptography refers to cryptographic algorithms that are believed to be secure against attacks from both classical computers and future quantum computers. These algorithms are designed to replace current encryption methods that are vulnerable to quantum attacks.</p>
  </details>
</div>

<div>
  <details>
    <summary>How does quantum computing threaten current encryption methods?</summary>
    <p>Quantum computers utilize the principles of quantum mechanics to solve complex mathematical problems much faster than classical computers.  Shor’s algorithm, specifically, can efficiently break many of the asymmetric encryption algorithms currently used to secure online communications.</p>
  </details>
</div>

<div>
  <details>
    <summary>What is the NIST’s role in the PQC transition?</summary>
    <p>The National Institute of Standards and Technology (NIST) has been leading the effort to standardize post-quantum cryptography algorithms. They have already finalized several algorithms and continue to evaluate new candidates to ensure long-term security.</p>
  </details>
</div>

<div>
  <details>
    <summary>What steps should organizations take to prepare for PQC?</summary>
    <p>Organizations should begin by conducting a comprehensive cryptographic inventory, assessing their vulnerabilities, and developing a roadmap for migrating to PQC algorithms. Investing in cryptographic agility and establishing a dedicated center of excellence are also crucial steps.</p>
  </details>
</div>

<div>
  <details>
    <summary>How will Google’s accelerated timeline impact businesses?</summary>
    <p>Google’s decision to accelerate its PQC migration timeline will likely put pressure on other organizations to do the same, particularly those that rely on Google’s services. Businesses will need to prioritize PQC adoption to maintain compatibility and security.</p>
  </details>
</div>

<div>
  <details>
    <summary>What is a “store now, decrypt later” attack?</summary>
    <p>A “store now, decrypt later” attack involves malicious actors collecting encrypted data today, anticipating that they will be able to decrypt it in the future when quantum computers become powerful enough to break current encryption standards.</p>
  </details>
</div>

The race to secure our digital infrastructure against the quantum threat is on. Google’s revised timeline is a clear signal that the time for preparation is now. Proactive planning, investment in PQC technologies, and a commitment to cryptographic agility are essential for navigating this evolving landscape.

Share this article with your network to raise awareness about the quantum threat and encourage proactive preparation. Join the conversation in the comments below – what steps is your organization taking to prepare for the post-quantum era?