Google accelerates post-quantum cryptography timeline to 2029

HackRead reports that Google has significantly advanced its schedule to implement post-quantum cryptography (PQC), setting a new target of 2029 for full system security against future quantum computers. This accelerated timeline is a direct response to emerging threats and the rapid advancement of quantum computing capabilities, far surpassing previous industry and government benchmarks.

Google's decision to aim for a 2029 PQC deadline, ahead of the NSA's 2031 and the US government's 2035 goals, stems from new research indicating quantum computers could break current encryption much sooner than anticipated. Security chiefs Heather Adkins and Sophie Schmieg highlighted that a quantum machine with one million qubits could compromise a 2,048-bit RSA key in under a week. This urgency is amplified by the "harvest now, decrypt later" threat, where adversaries stockpile encrypted data today to decrypt it with future quantum computers. To counter this, Google is integrating the NIST-developed ML-DSA signature system into Android 17 and has begun deploying quantum-resistant measures across Chrome and its Cloud services.

This move aligns with parallel industry changes, such as the CA/Browser Forum's reduction of SSL/TLS certificate lifespans to 47 days in the same year. Experts note that preparing for both short-lived certificates and PQC adoption presents a unified challenge, requiring organizations to adopt more agile and frequent cryptographic updates to maintain security in an evolving threat landscape.

Source: HackRead