33 Months to Q-Day

2026-04-07

The Post-Quantum cryptography timeline of industry leaders just went from "we have a decade" to "we have 33 months." Both Google and Cloudflare are now targeting 2029 for full post-quantum security, including authentication, not just encryption.

What changed? Two papers dropped in late March showing that breaking elliptic curve cryptography requires far fewer quantum resources than anyone expected. Google demonstrated a 20x reduction in quantum gates needed to crack ECC (and refused to publish the details, instead releasing only a zero-knowledge proof that the algorithm exists). Separately, Oratomic showed that neutral atom quantum computers could break 256-bit ECC with as few as 10,000 physical qubits, roughly 100x less overhead than previous estimates.

So far we have prioritized post-quantum encryption to stop harvest-now-decrypt-later attacks, and there has been some good progress for TLS, over 65% of traffic to Cloudflare already uses post-quantum key exchange. But with Q-Day potentially just a few years out, authentication becomes another existential risk. As Filippo Valsorda argues in a must-read post, the bet is not "are you 100% sure a cryptographically relevant quantum computer (CRQC) will exist in 2030?", the bet is "are you 100% sure a CRQC will NOT exist in 2030?"

Here in Switzerland, we are still missing regulatory pressure to act. FINMA has issued no PQC-specific guidance, it only requires institutions to manage technological risks proactively in general terms. The closest thing we have is FIND's voluntary action plan for the financial sector, which explicitly states that "the financial sector should not wait for regulators to impose mandates", because there are none.

Compare that to the EU, where DORA and NIS2 already mandate cryptographic agility and state-of-the-art encryption practices for financial institutions and critical infrastructure, creating strong de facto regulatory pressure toward PQC migration. The EU's coordinated PQC Roadmap, published by the NIS Cooperation Group in June 2025, then sets explicit milestones: national transition roadmaps by end-2026, high-risk systems secured with PQC by end-2030, and full transition by 2035. In the US, CNSA 2.0 requires all new National Security System acquisitions to be post-quantum compliant from January 1, 2027, with mandatory compliance across all NSS by 2031.

Many Swiss companies I talk to still treat PQC migration as someone else's problem. For a country hosting some of Europe's most critical financial and international infrastructure, that gap is getting harder to justify.

Comment or Share on