The industry's quantum security planning is built on a number that no longer holds.
Most organizations have anchored their cryptographic migration to NIST's 2035 deadline. That was a reasonable starting point in 2022. It isn't anymore.
This spring, four separate signals converged in the span of five weeks, and read together, they describe an industry that has run out of reasons to wait.
On March 25, Google moved its own internal post-quantum cryptography deadline to 2029, citing faster-than-expected progress in quantum hardware and error correction. When Google sets an internal deadline, that is an operational decision made by people with direct visibility into where the hardware is heading.
Just days later, Oratomic published research showing a fault-tolerant quantum computer capable of running Shor's algorithm could be built with as few as 10,000 qubits. Prior estimates ran north of a million. That reduction in resource requirements compresses timelines that 2035-based planning assumed were fixed.
Then Scott Aaronson, a co-author of the
@Coinbase advisory board's quantum security paper, and the researcher who spent two decades as the field's most prominent skeptic, wrote publicly that the most reputable people in quantum hardware are now telling him a cryptographically relevant machine ought to be possible by around 2029. When that particular person stops hedging, it is worth noting.
The threat is not abstract. It sits on-chain today.
Roughly 6.9 million
$BTC are held in UTXOs with public keys visible in clear text.
@Ethereum's entire validator layer runs on BLS signatures - a primitive with no quantum-resistant equivalent at current production performance. Every major proof-of-stake chain is at a different stage of acknowledging this. None has finished.
And these aren't migration problems in the conventional sense. They're redesign problems. Validator key migration requires consensus-protocol changes, not just primitive swaps. Every chain will eventually face a binary choice on dormant assets, flag day, or permanent honeypot. Wallets, custodians, and key management systems can't wait for chains to decide which post-quantum scheme they're adopting.
Planning against 2029 means none of this can be deferred.
The work is more than research. It's engineering, governance, and honest accounting of where the risk actually lives. The organizations that start that work now are the ones that won't be making decisions under pressure in three years.