Emerging Technology — 2026-09-08
G7 Cybersecurity Working Group Warns Quantum Computing Poses Near-Term Threat to Global Encryption Infrastructure
BLUFAbsent binding enforcement mechanisms, this G7 advisory will not accelerate PQC migration for most organizations, leaving harvest-now-decrypt-later exposure to compound unchecked.
The G7 Cybersecurity Working Group, in a report prepared in June at the G7 Summit in France and published on September 3 through France's ANSSI, warned that quantum computers capable of breaking widely used public-key cryptography could emerge on an uncertain but near-term timeline 1. The report was signed by CISA, the UK's NCSC, ANSSI, Germany's BSI, Canada's CSE, Japan's NCO and Italy's ACN 2. It said organizations "can no longer afford to postpone" transitioning to post-quantum cryptography, citing "harvest now, decrypt later" risks in which adversaries store encrypted data today to decrypt once quantum capability matures, along with threats to authentication mechanisms that could let attackers impersonate trusted entities or forge data 23. The working group called the quantum threat "off the radar for many organizations and not properly resourced" and urged a phased, risk-based transition prioritizing sensitive data and cryptographic inventories 23. The report set five priorities: raising awareness, developing national PQC strategies, advancing research and deployment, strengthening public-private coordination, and integrating PQC into procurement requirements. It urged "crypto-agility" since some NIST/NSA-vetted post-quantum algorithm candidates have already been broken by classical or AI-assisted attacks 2. CyberScoop noted the advisory follows a Trump administration executive order moving the US federal PQC migration deadline from 2035 to 2030, and Google's own internal shift to a 2029 target 2.
Analysis
The advisory formalizes what CISA and NCSC have flagged individually for years but adds no enforcement mechanism, leaving PQC migration timelines dependent on national regulators and procurement cycles rather than G7 mandate. Organizations that defer cryptographic inventories now face compounding remediation costs as NIST-vetted algorithms mature and adversary harvest-now-decrypt-later operations accumulate exploitable ciphertext. Moderate confidence reflects a single coordinated report signed by seven agencies, with no independent verification of member-state enforcement plans or budget commitments behind the rhetoric.
4 sources
- Preparing for the Post-Quantum Era: A Call to Action - ANSSI (French National Cybersecurity Agency)
- The G7 tells industry to hurry up and prep for post-quantum encryption - CyberScoop
- G7 sounds alarm on quantum cyber threats - ITPro
- G7 urges organizations to prepare for quantum cyber threats - The Record from Recorded Future News
View in full brief →