The Quantum Security Countdown: Why the World Must Replace Its Encryption Before 2035

OPEN CHRONICLE TECHNOLOGY | QUANTUM COMPUTING & CYBERSECURITY

Quantum computers have not yet broken the cryptographic systems protecting global digital infrastructure. But new US standards, an accelerated Google migration programme and the growing risk of stolen encrypted data are forcing governments and businesses to prepare for a threat that could arrive years from now.

By Open Chronicle Technology | November 13, 2026

1. The next cybersecurity crisis may begin long before the attack

For decades, modern digital security has depended on mathematical problems that conventional computers cannot solve efficiently.

These problems underpin the cryptographic mechanisms protecting online banking, government communications, corporate networks, software updates and much of the infrastructure supporting the internet.

The assumption has been straightforward: even with powerful conventional computing resources, recovering certain private cryptographic keys would require impractical amounts of time.

Quantum computing threatens to change that calculation.

A sufficiently powerful, fault-tolerant quantum computer could use specialised algorithms to defeat widely deployed public-key cryptographic systems, including RSA and elliptic-curve cryptography.

Such a machine has not been publicly demonstrated at the scale required to break these systems in practical, real-world conditions.

Nevertheless, the international security community is already preparing for its eventual arrival.

On October 27, 2026, the US National Institute of Standards and Technology, or NIST, announced a major transition report identifying vulnerable cryptographic standards and the replacements organisations should adopt.

The report represents an important development.

Quantum cybersecurity is no longer exclusively a scientific discussion about future computing capabilities.

It has become a technology migration programme with standards, deadlines, infrastructure requirements and substantial financial implications.

And for organisations protecting information that must remain confidential for decades, the danger may already exist.

2. The threat known as harvest now, decrypt later

One of the most important concepts in quantum cybersecurity is harvest now, decrypt later.

The idea is relatively simple.

An attacker intercepts and stores encrypted communications today, even though they cannot currently decrypt them.

The attacker then waits until future computing capabilities make the underlying cryptographic protection vulnerable.

If a sufficiently capable quantum computer becomes available, previously collected information may become readable.

The potential targets include diplomatic communications, classified documents, medical records, intellectual property and sensitive corporate information.

Not all encrypted information is equally vulnerable, and not every intercepted communication can necessarily be decrypted later.

The outcome depends on the cryptographic protocols used, whether quantum-vulnerable key establishment was involved, how the session keys were protected and whether the attacker captured sufficient information.

However, the threat is credible enough that NIST explicitly identifies it as a reason to begin migration before a cryptographically relevant quantum computer exists.

This creates a security problem that conventional risk assessments may underestimate.

A system can be secure against currently available attackers while still exposing information to a future cryptographic breakthrough.

The longer information must remain confidential, the more important that distinction becomes.

3. NIST has already established the foundations of quantum-resistant security

The transition to post-quantum cryptography began well before the latest migration report.

In August 2024, NIST approved three principal standards designed to resist attacks from future quantum computers.

They address two essential functions of modern cryptography: establishing shared secrets and verifying digital signatures.

ML-KEM, derived from the CRYSTALS-Kyber algorithm, provides a mechanism for establishing shared cryptographic secrets.

ML-DSA, derived from CRYSTALS-Dilithium, supports digital signatures.

SLH-DSA, derived from SPHINCS+, offers an alternative signature approach based on hash functions.

These standards do not require a quantum computer to operate.

That is an important distinction.

Post-quantum cryptography generally runs on conventional computing infrastructure. It uses mathematical techniques designed to resist known attacks by both classical and quantum computers.

It should not be confused with quantum key distribution, which relies on physical quantum phenomena and specialised communication equipment.

For most organisations, adopting post-quantum cryptography means upgrading software, protocols, cryptographic libraries, certificates and security infrastructure.

The challenge is therefore not to acquire quantum computers.

It is to modernise the cryptographic foundations of existing digital systems.

4. The significance of NIST’s October 2026 roadmap

NIST’s October 2026 report provides a more concrete framework for transitioning away from vulnerable cryptographic algorithms.

It identifies standards that will be deprecated and eventually disallowed within the NIST standards framework.

The report establishes a broad direction towards removing quantum-vulnerable public-key algorithms by 2035, with earlier deadlines for certain high-risk US federal systems.

The timelines reflect the complexity of cryptographic migration.

A major organisation may operate thousands of systems that depend on public-key cryptography.

Some are easy to update.

Others rely on embedded hardware, legacy applications, specialised network equipment or third-party software that may remain in service for many years.

A migration may require new certificates, protocol upgrades, vendor support and interoperability testing.

Changing a cryptographic algorithm can also affect performance, bandwidth, memory requirements and operational compatibility.

The practical difficulty is not simply selecting a secure replacement.

It is identifying every place where the old mechanisms are still being used.

5. Google has accelerated its timetable to 2029

One of the most significant corporate developments came in March 2026, when Google announced a target to complete its post-quantum cryptography migration by 2029.

The company linked its decision to developments in quantum hardware, error correction and estimates of the resources needed for quantum cryptanalysis.

Google’s decision is notable because its infrastructure supports services used by individuals, businesses and public institutions around the world.

Its migration programme includes protecting data against future decryption risks and modernising cryptographic components across its infrastructure.

The announcement does not establish that a quantum computer capable of breaking RSA already exists.

Nor does it prove that such a machine will be available by 2029.

Instead, it reflects Google’s assessment that the migration process must be completed before the threat becomes operational.

This distinction is essential.

Security planning should not depend on accurately predicting the exact year of a technological breakthrough.

The transition itself takes time.

If organisations wait until a cryptographically relevant quantum computer is publicly demonstrated, they may discover that replacing vulnerable infrastructure cannot be completed quickly enough.

6. Which encryption systems are actually threatened?

Public discussion frequently suggests that quantum computers will simply break all encryption.

That is misleading.

The impact depends on the cryptographic method.

The most significant known quantum threat concerns widely used public-key algorithms based on integer factorisation and discrete logarithm problems.

These include RSA and elliptic-curve cryptography.

Shor’s algorithm provides a theoretical method by which a sufficiently capable quantum computer could solve the underlying mathematical problems efficiently.

Symmetric encryption is different.

Algorithms such as AES are not affected in the same way.

Quantum search algorithms can provide theoretical advantages against brute-force key searches, but appropriately selected symmetric key lengths can maintain substantial security margins.

The distinction matters because a secure communications system may combine several cryptographic technologies.

For example, public-key mechanisms can establish session keys, while symmetric encryption protects the subsequent data exchange.

If the key establishment mechanism is vulnerable, the overall confidentiality of recorded communications may be at risk even when the symmetric encryption algorithm itself remains strong.

This is why post-quantum migration must examine complete protocols rather than isolated algorithms.

7. The hidden challenge: cryptography is everywhere

Most organisations do not maintain a single central list of every cryptographic mechanism used across their infrastructure.

Encryption and digital signatures are embedded in operating systems, network devices, cloud platforms, identity services, software distribution systems and business applications.

A large enterprise may rely on cryptography in areas that are not immediately visible to its security team.

These include virtual private networks, TLS connections, public-key infrastructure, firmware validation, code signing and machine-to-machine authentication.

Some cryptographic dependencies are controlled by external suppliers.

Others are embedded in devices that may not support software upgrades.

A complete migration therefore requires a detailed understanding of the technology estate.

The first practical step is often the creation of a cryptographic inventory.

This involves identifying algorithms, keys, certificates, protocols, applications and systems that depend on potentially vulnerable mechanisms.

The next step is prioritisation.

Systems protecting long-lived sensitive information should receive particular attention.

So should infrastructure that is difficult to replace or update.

NIST’s migration guidance recognises that different use cases require different approaches and that a universal migration strategy is unlikely to be effective.

8. Why governments are treating quantum security as a national priority

Quantum-resistant cryptography has implications far beyond ordinary corporate cybersecurity.

National security systems often protect information whose sensitivity extends over decades.

Diplomatic communications, intelligence records, military planning and critical infrastructure information may retain strategic value long after their creation.

A future ability to decrypt historical communications could therefore expose information that was considered secure at the time it was transmitted.

The United States has established specific transition requirements for national security systems through the National Security Agency’s Commercial National Security Algorithm Suite 2.0, known as CNSA 2.0.

The programme identifies quantum-resistant algorithms and establishes requirements for their adoption in relevant national security environments.

The transition also creates strategic questions about technology supply chains.

Governments depend on commercial hardware and software vendors to implement new cryptographic standards.

Those implementations must be secure, interoperable and available across a wide range of equipment.

This creates a dependency between national cybersecurity planning and the ability of technology manufacturers to deliver compatible products.

The issue is particularly important for infrastructure with long replacement cycles.

Military systems, industrial control equipment and certain telecommunications components may remain operational for many years.

If new equipment is deployed without sufficient cryptographic flexibility, organisations risk creating systems that are difficult to secure later.

9. Cryptographic agility may become a defining requirement

A successful post-quantum transition requires more than installing a new algorithm.

Organisations need the ability to change cryptographic mechanisms as standards evolve.

This capability is commonly described as cryptographic agility.

A cryptographically agile system can replace or update algorithms, keys, certificates and related components without requiring a complete redesign.

The principle is important because no cryptographic algorithm can be guaranteed secure forever.

New mathematical discoveries, implementation weaknesses or advances in cryptanalysis may change the security assumptions underlying a standard.

Post-quantum cryptography is based on the best available public research and extensive evaluation.

It is not a promise that future vulnerabilities are impossible.

NIST continues to evaluate additional algorithms, including HQC as a future alternative for key establishment.

The long-term objective should therefore be adaptable security infrastructure.

Systems designed around a single hard-coded cryptographic method may become increasingly difficult to maintain.

Those that separate cryptographic functions from application logic may be better positioned to respond to future changes.

10. The cost of waiting

Quantum migration will impose costs on organisations.

Software upgrades, infrastructure replacement, testing, vendor coordination and staff training all require investment.

Some organisations may face performance or compatibility challenges when introducing new cryptographic mechanisms.

Others may need to replace hardware that cannot support modern implementations.

However, postponing the transition can create additional costs.

Legacy systems may become more difficult to update.

Vendors may withdraw support for older products.

Organisations may accumulate more data whose confidentiality depends on vulnerable cryptography.

The challenge is especially serious for systems with long development and deployment cycles.

A product designed today may still be operating in 2040.

If its cryptographic architecture cannot be upgraded, the organisation may face expensive replacement work before the end of the product’s intended life.

For this reason, quantum readiness should increasingly influence technology procurement.

Security teams should ask suppliers whether their products support post-quantum algorithms, whether their cryptographic components are replaceable and what migration roadmaps are available.

The answers may become important factors in long-term infrastructure investment.

11. Five strategic priorities for organisations

12. The quantum threat is real, but the timeline remains uncertain

One of the greatest challenges in communicating quantum cybersecurity is distinguishing scientific progress from operational capability.

Quantum computing has advanced significantly, but the existence of increasingly sophisticated quantum processors does not mean that current encryption can already be broken at scale.

A practical attack against widely deployed public-key systems would require a quantum computer with sufficient logical qubits, error correction, reliability and computational resources.

The exact requirements depend on the algorithm being attacked and the efficiency of the quantum implementation.

Research may reduce those requirements over time.

But uncertainty remains substantial.

Neither the publication of NIST standards nor Google’s 2029 migration target establishes a confirmed date for the arrival of a cryptographically relevant quantum computer.

These initiatives are precautionary responses to a credible future threat.

That distinction should guide public discussion.

The danger is not that every password, bank account or encrypted message will suddenly become exposed tomorrow.

The danger is that organisations may need many years to replace vulnerable cryptographic infrastructure, while some of the information they protect today must remain confidential for much longer.

The timeline for migration and the timeline for quantum capability are separate.

Security depends on ensuring that the first is completed before the second creates unacceptable risk.

Conclusion: the most important quantum security decision must be made before the breakthrough

The future of quantum computing remains uncertain.

Researchers continue to improve hardware, error correction and computational techniques, but the development of a machine capable of breaking widely used public-key cryptography at practical scale remains a major scientific and engineering challenge.

What is no longer uncertain is the direction of cybersecurity policy.

NIST has approved post-quantum cryptographic standards and established a migration roadmap.

Google has announced an accelerated 2029 target.

National security authorities are developing requirements for protecting sensitive infrastructure against future quantum attacks.

Together, these developments show that the transition has moved beyond theoretical preparation.

It is becoming part of the modern cybersecurity agenda.

For governments, the priority is protecting strategically sensitive information.

For businesses, it is identifying cryptographic dependencies, evaluating suppliers and planning infrastructure upgrades.

For technology developers, it is building systems that can evolve as cryptographic standards change.

The arrival of a cryptographically relevant quantum computer may still be years away.

But the security decisions that determine its eventual impact are being made now.

The greatest quantum cybersecurity risk may not be the day a powerful quantum computer arrives. It may be discovering on that day that the transition should have started years earlier.