Quantum computers threaten encryption with 2029 deadline

Concerns are mounting in the cybersecurity industry over the rapid advancement of quantum computers, which could jeopardize nearly all modern encryption methods in the coming years. This warning comes from Filippo Valsorda, the maintainer of the Go language's cryptographic library and former head of Go's security team at Google.

He notes that previous timeline estimates were overly optimistic. While it was once thought the shift to post-quantum cryptography could be completed by the mid-2030s, the industry now faces a deadline of 2029. This leaves little time for a gradual transition.

Valsorda stresses that current algorithms, including widely used elliptic curve cryptography, should already be considered potentially insecure. He also opposes hybrid solutions that blend old and new methods, viewing them as temporary crutches that only delay the move to full quantum-resistant protection.

The main challenge is that post-quantum algorithms demand significantly more resources. For instance, key and signature sizes can increase tenfold or more, impacting connection speeds and infrastructure load. This is especially critical for resource-constrained systems like IoT devices.

The issue touches nearly every aspect of digital security, from HTTPS certificates and email to blockchain and secure computing. Specific technologies, including Intel and AMD's trusted execution environments, could become entirely vulnerable to quantum attacks.

Experts agree that the world must undergo a swift, large-scale shift to new encryption standards. Otherwise, within a few years, encrypted data accumulated today could become susceptible to future decryption.