Cryptographer calls for urgent post-quantum encryption rollout following Google advance

A leading cryptography engineer is calling for immediate deployment of quantum-resistant encryption across global infrastructure, citing new urgency after Google demonstrated quantum computing capabilities that threaten current security standards. Filippo Valsorda, a cryptography engineer who previously worked at Google and Cloudflare, published an analysis warning that the risk of inaction on post-quantum cryptography has become unacceptable. The call comes after Google researchers disclosed advancements in quantum error correction that bring practical quantum codebreaking closer to reality. Current encryption protocols used to secure internet communications, financial transactions, and sensitive data rely on mathematical problems that quantum computers could solve efficiently. A sufficiently powerful quantum computer could break widely used algorithms like RSA and elliptic curve cryptography, potentially exposing decades of intercepted communications retroactively. The National Institute of Standards and Technology finalized post-quantum cryptography standards in 2024, and major technology companies have begun implementing them. However, Valsorda argues the pace is insufficient given the threat of "harvest now, decrypt later" attacks, where adversaries collect encrypted data today to decrypt once quantum computers become available. Google, Microsoft, and Cloudflare have announced post-quantum protections in some services, but adoption across the broader internet remains limited. The transition requires updating billions of devices and countless software systems, a process that typically takes years or decades. The timeline for cryptographically relevant quantum computers remains uncertain, with estimates ranging from five to twenty years. But Valsorda notes that security infrastructure must be deployed before the threat materializes, as the window for transition may be shorter than anticipated.