Google Sets 2029 Deadline for Post-Quantum Cryptography

Google has announced a new strategic timeline to migrate its global systems to post-quantum cryptography (PQC) by 2029 [1]. This initiative is designed to defend against the potential for future quantum computers to decrypt sensitive data that is currently being intercepted and stored by attackers [1].

Key takeaways

• Google aims to complete its migration to post-quantum cryptography by 2029 [1].
• The strategy prioritizes "crypto agility," allowing for the rapid replacement of cryptographic algorithms as security needs evolve [1].
• Security experts warn of a "harvest now, decrypt later" threat, where encrypted data is collected today to be broken once quantum technology matures [1].
• While current quantum computers cannot crack existing encryption, Google is proactively aligning its infrastructure with standards from the U.S. National Institute of Standards and Technology [1].

Addressing the Quantum Threat

The shift toward PQC is driven by the increasing pace of advancements in quantum computing, a field in which Google is an active participant [1]. According to Heather Adkins and Sophie Schmieg of Google, the company is taking responsibility as a pioneer in the field to lead by example and provide industry-wide clarity [1]. The migration is intended to mitigate the risk of data exposure that could occur when sufficiently powerful quantum systems emerge in the future [1].

Google is already implementing these security measures across its infrastructure and products [1]. While the company has set a 2029 target, industry voices acknowledge that the timeline for such a massive transition can vary significantly depending on the scale of the organization, with some estimates suggesting the process could take more than a decade [1]. Google encourages other organizations to begin their transitions immediately rather than waiting for a definitive "quantum moment" to occur [1].

Why it matters

The transition to post-quantum cryptography represents a fundamental shift in how global digital systems secure information. Because attackers are already engaging in the collection of encrypted data with the expectation that it will eventually be decrypted, the urgency to adopt quantum-safe standards is increasing [1]. By establishing a clear timeline, Google hopes to accelerate the digital transition across the entire technology industry, ensuring that sensitive data remains protected against the evolving capabilities of quantum computing [1].