Thought Leadership
Google is tightening its internal timeline significantly, hoping others in the industry will follow.
Google has announced it is significantly accelerating the migration of its products to post-quantum cryptography. Rather than following the 2035 deadline outlined in NIST guidelines, the company is now targeting 2029. Two senior security experts at the company justified the move in a blog post, citing faster than expected progress in quantum research.
New NIST algorithms as the foundation
The effort is about replacing existing encryption methods with new algorithms capable of withstanding attacks from powerful quantum computers. These algorithms were developed and vetted over more than a decade by the National Institute of Standards and Technology in collaboration with independent cryptologists.
The threat is already real today
Google warns emphatically about the risks in its blog post: “Quantum computers will pose a significant threat to current cryptographic standards, and specifically to encryption and digital signatures.” The threat to encryption is already acute today, as attackers can intercept and store encrypted data now with the intention of decrypting it later using a quantum computer. Google refers to these as “store-now-decrypt-later attacks.” While digital signatures face a future threat, the transition must still happen well in advance, “prior to a Cryptographically Relevant Quantum Computer (CRQC).” Google has therefore adjusted its approach: “That’s why we’ve adjusted our threat model to prioritize PQC migration for authentication services.” The company explicitly recommends that other engineering teams do the same.
No mandate for the private sector
Unlike U.S. federal agencies, private companies are under no obligation to adopt quantum-resistant encryption. Google therefore sees its own ambitious timeline as setting an example. The company says it wants to provide the industry with the clarity and urgency needed to accelerate the digital transition.
The international competitive landscape adds further urgency. Industry leaders in the U.S. point to significant breakthroughs by Chinese research institutions in multiple areas of quantum computing. Washington is reportedly considering moving the government timeline forward to 2030 or sooner. The current deadline for federal agencies remains 2035.
