**Microsoft** is significantly expediting its quantum-safe security initiatives, driven by the belief that cryptographically relevant quantum computers could emerge sooner than anticipated. **Mark Russinovich**, Chief Technology Officer of **Microsoft Azure**, stated, "Advances in quantum research and development have shifted the risk horizon... the work required to prepare is significant, so organizations need to start now." ### Ambitious 2029 PQC Transition Target The company is accelerating the **Microsoft Quantum Safe Program (QSP)** timeline, setting a goal to transition critical products and services to post-quantum cryptography (PQC) by 2029. This ambitious target aligns with the integration of PQC requirements into its **Secure Future Initiative (SFI)**. Key focus areas for **Microsoft** include upgrading network cryptography through the adoption of **TLS 1.3**, establishing crypto-agility for stored data to enable seamless cryptographic changes, and migrating to PQC algorithms for securing trust chains such as code signing, certificate issuance, key protection, and update pipelines. **Russinovich** emphasized, "This brings quantum-safe readiness into the same disciplined engineering framework we use for other critical security outcomes: clear ownership, measurable milestones, and transparent progress. Embedding these capabilities into our platforms empowers customers to move sooner and more confidently." ### The Imperative of Crypto-Agility **Microsoft** highlights crypto-agility as a crucial component of post-quantum migration. This involves eliminating hard-coded algorithm assumptions, retaining sufficient information to reconstruct cryptographic contexts, and designing systems where algorithm upgrades become routine engineering tasks rather than emergency overhauls. As explained by **Microsoft**, "Crypto-agility requires either self-describing cryptographic metadata or versioned ciphertext formats so implementations can read legacy data while writing with the newest approved algorithms. A well-designed crypto-agile system should aim to read older ciphertext formats long enough to support migration, while writing new data with the newest approved configuration." ### Broader Industry and Government Response This announcement follows closely on the heels of the U.S. President signing an executive order, mandating federal agencies to transition high-value assets and high-impact systems to PQC by specific deadlines. Other tech giants are also making significant strides. Earlier this year, **Google** announced a new program in its **Chrome** browser to bolster **HTTPS** certificates against future quantum threats and publicly committed to migrating its infrastructure to be quantum-secure by 2029. Similarly, web infrastructure company **Cloudflare** has outlined plans to achieve PQC readiness by the same year. ### The 'Harvest Now, Decrypt Later' Threat The urgency for these transitions is underscored by the "harvest now, decrypt later" threat, where adversaries collect currently encrypted data with the intention of decrypting it once large-scale quantum computers become operational. Adding to these concerns, a team of **Google** researchers recently disclosed a significant improvement in the quantum algorithm for breaking elliptic curve cryptography, specifically the 256-bit elliptic curve discrete logarithm (**ECDLP-256**), requiring fewer qubits and gates than previously thought. Separately, academics from **Caltech** and **Oratomic** have demonstrated a novel error-correction method that could make **Shor's algorithm** practical with as few as 10,000 reconfigurable qubits, potentially enabling the breaking of widely used encryption standards like **RSA-2048** and **P-256**.