G7 Calls on Firms to Adopt Post‑Quantum Encryption Ahead of Emerging Threats

The Group of Seven nations, working through its Cyber Security Working Group in partnership with the United States Cybersecurity and Infrastructure Security Agency (CISA), issued a joint advisory on Thursday urging organizations worldwide to begin transitioning to post‑quantum cryptographic solutions.

The warning comes as advances in quantum computing threaten to render today’s widely used public‑key algorithms—such as RSA and elliptic‑curve cryptography—vulnerable to decryption. A sufficiently powerful quantum machine could theoretically solve the mathematical problems that protect most online communications, exposing data ranging from financial transactions to state secrets.

While practical, large‑scale quantum computers remain a research challenge, experts agree that the technology is progressing faster than many anticipated. The National Institute of Standards and Technology (NIST) has been running a multi‑year competition to standardize quantum‑resistant algorithms, with the first set of candidates expected to be finalized in the next few years. The G7 advisory aligns with that timeline, emphasizing that the migration must start now rather than later.

In the advisory, the G7 and CISA outline a phased approach: organizations should first conduct risk assessments to identify assets protected by vulnerable cryptography, then pilot quantum‑safe algorithms in non‑critical environments, and finally develop comprehensive migration roadmaps that incorporate vendor support and staff training.

Industries that rely heavily on secure communications—financial services, energy grids, telecommunications, and government agencies—are singled out as priority sectors. Compromise of encryption in these areas could have cascading effects on economic stability and national security, making early preparation a strategic imperative.

Transitioning is not without obstacles. Legacy hardware, proprietary protocols, and limited expertise in post‑quantum methods can slow adoption. The advisory acknowledges these challenges and urges policymakers to consider incentives, such as grants or tax credits, to offset implementation costs.

Beyond individual organizations, the G7 stresses the need for international coordination. By sharing best practices, harmonizing standards, and aligning regulatory frameworks, the coalition aims to prevent a fragmented security landscape that could be exploited by malicious actors.

Looking ahead, experts anticipate that NIST’s finalized standards will be published by 2025‑2026, with many vendors planning product updates shortly thereafter. The G7’s message is clear: organizations that wait until standards are formally ratified risk falling behind a critical security deadline.

Early adoption of quantum‑resistant cryptography not only safeguards current data but also future‑proofs systems against a technology that could reshape the cyber threat environment. The advisory serves as a call to action, urging the private sector and public institutions alike to treat the quantum transition as a strategic priority rather than an optional upgrade.