Google sets 2029 deadline for post-quantum cryptography migration

Google has announced a target timeline of 2029 to complete its transition to post-quantum cryptography (PQC), as part of efforts to prepare for the security risks posed by future quantum computers.

The company said the updated timeline reflects recent advances in quantum computing hardware, quantum error correction and resource estimates for quantum factoring — developments that could eventually render current encryption standards obsolete, Caliber.Az reports via the blog post of Google's Security Engineering VP Heather Adkins.

Quantum computers are expected to pose a significant threat to existing cryptographic systems, particularly encryption and digital signatures.

Google warned that encryption is already vulnerable to so-called “store now, decrypt later” attacks, in which encrypted data is harvested today with the expectation it could be broken in the future. Digital signatures, meanwhile, face risks once a Cryptographically Relevant Quantum Computer (CRQC) becomes operational, making early migration to PQC essential.

In response, Google said it is prioritising the transition of authentication services and digital signature systems to post-quantum standards. The company encouraged other engineering teams and organisations to accelerate their own migration plans.

As part of its implementation efforts, Google confirmed that Android 17 will integrate PQC digital signature protection using ML-DSA, in alignment with standards developed by the U.S. National Institute of Standards and Technology (NIST). The company also highlighted ongoing PQC support in its Chrome browser and cloud services, as well as guidance for businesses navigating the transition.

Google described the 2029 goal as an ambitious but necessary step to help drive broader industry readiness for the emerging quantum era.

By Sabina Mammadli