Microsoft accelerates Quantum Safe Program to 2029

Security researchers have spent years bracing for cryptanalytic assaults from tomorrow's quantum machines, yet Microsoft has pulled forward its own schedule after concluding the danger looms closer than first assumed.

Microsoft updates its quantum security timeline. The company issued a blog post that advances the Quantum Safe Program target to 2029. It now intends to be quantum-apocalypse-ready by that year as the threat reportedly intensifies.

Post-quantum cryptography shifts from distant threat to near-term priority. Microsoft states that post-quantum cryptography "was framed as a future problem: important, inevitable, but distant." That perspective is evolving as technology advances and organizations prepare for the scale and complexity of the transition ahead.

Q-Day risk prompts earlier preparation. Q-Day, also called Y2Q, is the term for the point at which quantum computers grow powerful enough to break today's encryption methods. Microsoft believes "cryptographically relevant quantum computers could arrive sooner than previously expected—and the work required to prepare is significant so organizations need to start now."

Harvest-now-decrypt-later attacks add urgency. Adversaries can gather encrypted information immediately with plans to unlock it once quantum tools mature. The tactic forces companies to shield their data from future quantum decryption instead of focusing solely on present-day risks.

Current encryption vulnerable to quantum solving. Most systems today rely on algorithms rooted in mathematical puzzles that quantum computers can solve with relative ease. Post-quantum cryptography seeks to provide an additional layer of defense, although even successful versions stay unproven because the advanced machines they target do not yet exist.

Broader resilience effort beyond cryptography. Microsoft argues its Quantum Safe Program goes beyond future cryptography and is only part of a "broader effort to strengthen long-term resilience across identity, infrastructure, data, and supply-chain security." The company is telling customers to study the revised timeline and begin planning their implementations.