Google says it is setting a timeline to migrate to post-quantum cryptography (PQC) by 2029, warning that action is needed before “a future quantum computer can break current encryption”.
A new era of quantum computing could challenge the foundations of online security sooner than many expect, Google says.
ADVERTISEMENT
ADVERTISEMENT
Cybersecurity experts have sounded the alarm for years about quantum computers becoming so powerful that they could break the public encryption systems that protect our online conversations, bank accounts, and most vital infrastructure, wreaking havoc on governments and businesses.
In a blog post, Google said that “quantum computers will pose a significant threat to current cryptographic standards, and specifically to encryption and digital signatures”.
Quantum computing is a technology that uses the principles of quantum mechanics to process information.
While it heralds unprecedented potential in improved performance for useful applications such as drug discovery, scientists have warned for decades that such immense computational power can also be used to break traditional encryption, which is central to keeping information confidential and secure on the Internet.
Google said it is setting a timeline to migrate to post-quantum cryptography (PQC) by 2029, urging other companies to follow suit. The company warns that action is needed before “a future quantum computer can break current encryption”.
“As a pioneer in both quantum and PQC, it’s our responsibility to lead by example and share an ambitious timeline. By doing this, we hope to provide the clarity and urgency needed to accelerate digital transitions not only for Google, but also across the industry.”
Today’s quantum computers are not yet capable of breaking encryption at scale. Their basic units, known as qubits, are still too unstable to handle large-scale decryption.
But Google warns that data being generated today could still be at risk in the future. One concern is a type of cyber attack known as “store now, decrypt later”, where attackers collect and store encrypted data now with the intention of decrypting it once powerful quantum computers become available.
Governments are increasingly urging companies to begin preparing for the shift, recognising that the transition will take time.
Countries including the United Kingdom, France, Germany, the Netherlands and the United States have all published strategies, guidelines or white papers outlining the risks and the need for action.
At the same time, the cryptographic community is developing new encryption methods designed to withstand quantum attacks, while countries are racing to build quantum network infrastructure, with China seen as one of the frontrunners.
The European Commission aims to have an operational pan-European quantum communication infrastructure in place by 2027 via its European Quantum Communication Infrastructure Initiative (EuroQCI).
