Google $GOOGL's internal deadline of 2029 for implementing post-quantum security arrives six years earlier than the 2035 goal established in NIST recommendations. Security leads Heather Adkins and Sophie Schmieg explained via a company blog that the accelerated schedule is a response to recent strides in quantum hardware, improved error correction, and revised mathematical factoring estimates.
The move is faster than current federal timelines. Reports from Ars Technica indicate the NSA is aiming for 2031, while CyberScoop noted a broader government requirement for agencies to be ready by 2035. Google said the push is tied to two risks. The company highlighted two specific vulnerabilities: the immediate danger of "store-now, decrypt-later" data harvesting and the long-term necessity of shielding digital signatures before a functional quantum computer emerges.
Google also outlined Android changes as part of the effort. Android 17 will support ML-DSA, a digital signing algorithm aligned with NIST standards. Ars Technica reports that Android is embedding the ML-DSA algorithm into its hardware root of trust, providing a mechanism for developers to secure software signatures with post-quantum keys. As part of the transition, Google intends to move the Play Store and all associated developer app signatures to quantum-resistant standards.
Adkins and Schmieg said Google wants its accelerated timetable to help push the broader industry to move faster. CyberScoop reported that private businesses are not under a federal mandate to adopt quantum-resistant encryption.
Ars Technica reported that some cryptography experts were surprised by the new deadline. Brian LaMacchia, who led Microsoft $MSFT’s move to post-quantum security, told Ars Technica that aiming for 2029 is much more ambitious than government timelines and said the quick shift makes some people wonder about Google’s reasons.
According to CyberScoop, the faster roadmap reflects a consensus among U.S. quantum executives that research labs in China have made significant technical gains over the previous two years. The outlet also noted that the White House has considered an executive order that could mandate federal agencies to finalize their migration by 2030 or even earlier.