Microsoft pulls its post-quantum deadline forward to 2029

[Harbour]

So Microsoft just told everyone the quantum clock is ticking faster than they thought. Their Azure CTO says the risk horizon has shifted and cryptographically relevant quantum computers could show up sooner than the old estimates suggested. They are speeding up the whole Quantum Safe Program to hit post-quantum crypto across critical products by 2029

What stands out to me is the framing that the work required is significant so orgs need to start now. That is not the usual vague hand waving you get from vendors on this topic. It reads like they actually believe the migration is going to take years of grinding through TLS stacks and certificate policies

The concrete stuff they listed is upgrading network crypto to TLS 1.3 and building crypto agility so algorithms can swap without redesigning systems. That agility piece is the smart part because nobody knows exactly which PQC algorithms survive the next round of cryptanalysis. If you can hot swap them you are not betting the farm on one choice

My honest take is that 2029 is still optimistic for a company that size given how much legacy garbage runs under Azure. But even announcing it publicly puts pressure on the rest of the industry to stop treating harvest now decrypt later as a hypothetical. This is the kind of thing this whole forum exists for so I am glad they are moving

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029thehackernews.com