Google to switch authentication to post‑quantum crypto by 2029 — and Bitcoin may be in the crosshairs
Google has announced it will migrate its authentication services to post‑quantum cryptography (PQC) by 2029, a move that underscores growing concern about the real‑world impact of advancing quantum hardware. When Google unveiled its Willow quantum chip in December 2024, many in crypto judged a quantum threat to be distant. But fresh estimates from Google on quantum hardware, error correction, and factoring resources have reignited debate over whether a future quantum computer could crack cryptocurrency keys.
Why this matters for crypto
- Bitcoin currently relies on SHA‑256 for mining and the Elliptic Curve Digital Signature Algorithm (ECDSA) to secure private keys and sign transactions. These primitives are considered secure against classical attacks, but large enough quantum computers could undermine them.
- Google’s announcement bluntly states: “Quantum computers will pose a significant threat to current cryptographic standards, and specifically to encryption and digital signatures. The threat to encryption is relevant today with store‑now‑decrypt‑later attacks, while digital signatures are a future threat that require the transition to PQC prior to a Cryptographically Relevant Quantum Computer (CRQC).”
- In its estimates, Google suggests a future quantum machine could recover Bitcoin private keys in roughly nine minutes — just one minute shy of Bitcoin’s average block time. If accurate, that raises a practical attack vector: an attacker who derives a private key quickly could potentially steal funds before a transaction is confirmed.
Responses across the ecosystem
- Ethereum has been more proactive, working on a multi‑fork roadmap and running tests to introduce post‑quantum protections.
- Bitcoin’s development teams have not publicly outlined a comprehensive post‑quantum transition plan. That said, many in the community suspect engineers are researching mitigations behind the scenes.
What to watch
- Timelines for PQC adoption across major custodians, exchanges, and wallet providers. Store‑now‑decrypt‑later attacks mean encrypted traffic captured today could be decrypted in the future if records are not migrated to PQC.
- Research updates on quantum error correction, hardware scaling, and revised resource estimates from major labs, which will clarify how imminent a Cryptographically Relevant Quantum Computer (CRQC) really is.
- Any concrete proposals from Bitcoin core developers for signature upgrades or soft/hard fork strategies.
Google’s migration plan is a clear signal to the industry: quantum readiness is no longer purely academic. Crypto projects, custodians and users should be paying attention now and preparing migration paths for post‑quantum security.
Read more AI-generated news on: undefined/news
