Google LLC today announced that it’s stepping up its push toward a quantum computing-safe future with the introduction of a 2029 migration timeline to post-quantum cryptography, or PQC.

The timeline offers a clearer strategy for migrating global systems to PQC as the threat from future quantum computers accelerates.

The timeline focuses on what Google calls “crypto agility,” the ability to rapidly replace cryptographic algorithms without disrupting services, already part of a long-term effort. The new timeline shifts the need into a more urgent phase as recent advances in quantum computing, some of them by Google itself, are increasing concerns about when current encryption methods could become vulnerable.

The risk presented by the rise of quantum computing is not theoretical, with security experts warning of a “harvest now, decrypt later” model, where attackers collect encrypted data today with the expectation that it can be broken in the future once sufficiently powerful quantum systems emerge.

Quantum computing isn’t advanced enough to crack existing cryptography today, but the fact that it could in the near future using existing breached data increases pressure on organizations handling sensitive data to start acting now.

Google is already rolling out PQC across its infrastructure and products that align with standards from the U.S. National Institute of Standards and Technology. The company expects to complete its migration within those guidelines while continuing to share research on how quickly quantum systems could affect existing encryption.

“As a pioneer in both quantum and PQC, it’s our responsibility to lead by example and share an ambitious timeline,” Heather Adkins, vice president of security engineering at Google, and Sophie Schmieg, senior staff cryptography engineer at Google, wrote in a blog post. “By doing this, we hope to provide the clarity and urgency needed to accelerate digital transitions not only for Google, but also across the industry.”

How long the migration will take, however, is another matter. Some estimates suggest migration could take years or even more than a decade, depending on scale, whereas Google and other industry voices are signaling that organizations should begin transitioning immediately rather than waiting for a definitive “quantum moment.”

Image: Google