Google Urges Governments to Accelerate Quantum-Resistant Encryption Adoption
- Google executives Kent Walker and Hartmut Neven warn of 'store now, decrypt later' attacks where hackers collect encrypted data for future quantum decryption[2][3][4].
- Google has prepared since 2016, deploying post-quantum cryptography in Chrome since May 2024 and internal communications since 2022, targeting full NIST-aligned migration in 2026[1][2][3].
- The company recommends government mandates for cloud modernization, AI security integration, global standards alignment, and expert engagement[2][4].
- Enterprises and critical sectors like finance and healthcare have 12-24 months to migrate, with NIST finalizing standards in 2024[3][5].
- Google introduced quantum-safe digital signatures in Cloud KMS preview, supporting ML-DSA-65 and SLH-DSA-SHA2-128S[5].
Google executives Kent Walker and Hartmut Neven called on governments and industry to prioritize post-quantum cryptography adoption, citing imminent threats from quantum computers that could decrypt currently secure data. In a policy brief, they highlighted ongoing 'store now, decrypt later' attacks and detailed Google's progress toward completing its migration by 2026 in line with NIST 2024 standards[2][3][4][6].
The Emerging Quantum Threat
Hackers are collecting encrypted data today for decryption once quantum computers mature, a strategy known as 'store now, decrypt later' attacks. This puts financial transactions, private communications, and classified data at risk as quantum hardware advances faster than anticipated. Google notes that while large-scale quantum computers capable of breaking current public-key cryptography do not yet exist, sophisticated actors are not waiting[2][3][4].
Google's Preparation Timeline
Google began testing post-quantum cryptography in Chrome in 2016 and has used it for internal communications since 2022. In May 2024, Chrome enabled ML-KEM by default for TLS 1.3 and QUIC on desktop, with servers also supporting it. The company is on track to complete its full post-quantum migration per NIST guidelines, including deployments in products like Cloud KMS with quantum-safe digital signatures now in preview[1][3][5].
Recommendations for Action
Google urges governments to treat quantum-resistant encryption as critical infrastructure, mandating cloud modernization and PQC integration in AI security. They advocate for global alignment on standards, ongoing engagement with quantum experts, and migrations within 12-24 months for enterprises, especially in finance and healthcare facing regulatory pressure[2][3][4].
Technical Deployments
Google Cloud KMS now supports quantum-safe digital signatures using NIST standards FIPS 204 (ML-DSA-65) and FIPS 205 (SLH-DSA-SHA2-128S) for software-based keys in preview. Implementations are open-sourced via BoringCrypto and Tink libraries, with plans for hardware support in Cloud HSM and collaboration with vendors[5].
Companies mentioned
Alphabet Inc. provides a diverse range of products and digital platforms to consumers across multiple global regions, including North and South America, Europe, the Middle East, Africa, and the Asia-Pacific. The company…