Munich, Germany, 8 July 2026 – Quantum computers and their impact on cybersecurity have long been considered a distant prospect. But this view is increasingly changing. Giesecke+Devrient (G+D) explains why it is crucial to seize the opportunities of the quantum age early on and set the course for secure and future-proof cryptography.

Quantum computers are widely regarded as one of the most transformative technologies of the future. Since they can perform complex calculations significantly faster than today’s computer systems, they open up great opportunities in fields such as medicine, materials research, and logistics, as well as in the development of new AI applications. At the same time, however, the technology also poses a significant risk.

Quantum computers could eventually break encryption methods that are widely used today. This creates a major challenge, particularly for critical digital infrastructures such as payment systems, digital identities, mobile networks, IoT applications, and government infrastructure. If existing encryption methods become vulnerable, payments could be manipulated, confidential communication decrypted, or digital identities compromised.

This is why the development of Post-Quantum Cryptography (PQC) is so important: cryptographic methods designed to remain secure even against attacks by quantum computers. Since quantum computing was long considered a distant future technology, its impact on cybersecurity was often seen as a concern for the more distant future as well. Today, however, there are growing signs that the need for PQC may arrive much sooner than expected. G+D outlines the key reasons why:

1. Advances in quantum research. New scientific studies show that breaking today’s encryption methods may require significantly less powerful quantum computers than previously assumed. This is due to advances in quantum research that could lower the technical requirements for such systems.
2. Massive investments in quantum computing. Billions are now being invested worldwide in the development of quantum computing technologies. According to McKinsey, global investments have increased sixfold in just one year. As a result, the development of high-performance quantum computers is advancing rapidly, while market-ready, innovative partial solutions are steadily increasing.
3. Ambitious timelines from technology companies. Companies such as Google and Cloudflare have finalized their migration plans and are now aiming for a complete transition to PQC by 2029. This timeline is significantly earlier than many previous industry roadmaps indicated, which generally projected a broad migration to occur around the mid-2030s.
4. Government roadmaps. An increasing number of governments and security agencies are publishing official strategies and roadmaps for PQC migration. In June 2024, the European Union also released a coordinated roadmap, calling on its Member States to transition highly critical use cases to quantum-secure cryptographic methods by the end of 2030 at the latest.
5. Adaptations by standards organizations. International organizations such as GSMA, 3GPP, ICAO, and the IETF are also taking action. They are working to extend existing standards and security protocols to include PQC in order to ensure a high level of security and interoperability.

These developments show that we can no longer afford to postpone the issue of PQC. Especially since cybercriminals have already begun preparing for the not-too-distant future by carrying out so-called “harvest now, decrypt later” attacks: they steal encrypted data in the expectation that they will soon be able to decrypt it using quantum computers.

The transition to post-quantum cryptography is a highly complex process that will take several years, because cryptographic methods are deeply embedded in a wide variety of systems, networks, and applications. Many components will need to be adapted or replaced, with long-lived systems in particular requiring an early transition. Since entire ecosystems – such as those for identity management or telecommunications – cannot be migrated all at once, a phased migration is necessary.

The initial focus is on high-risk use cases. For example, quantum-secure signatures can be implemented in identity documents to provide long-term protection for the integrity and authenticity of the data. In eSIM management, the priority is to secure profile downloads – that is, the transfer and installation of eSIM profiles on end-user devices.

This risk-based prioritization is also reflected in international standards organizations. They are currently developing and prioritizing protocols and standards for systems where long data lifecycles, high criticality, and significant potential damage converge. Examples include ICAO for identity documents, and GSMA/3GPP for eSIM and mobile communications.

“The move toward a quantum-secure future requires early and coordinated action across the entire industry,” explains Gabriel von Mitschke-Collande, Chief Digital Officer at G+D. “Companies like G+D are already working intensively to further develop cryptographic methods and security solutions so that digital infrastructures, communication systems, and sensitive data remain protected against future cyberattacks, thereby opening up new opportunities to make the digital age safer than ever. One example is the feasibility study successfully completed this year by G+D and the German Federal Printing Office (Bundesdruckerei) – one of the world’s first functional demonstrators of a national ID card featuring both classical and post-quantum cryptography in accordance with the latest recommendations for quantum-secure algorithms. Preparing for the quantum era is therefore not an option for tomorrow – it has already begun.”

About Giesecke+Devrient

Giesecke+Devrient (G+D) is a global SecurityTech company headquartered in Munich. G+D makes life safer for billions of people. The company builds trust in the digital age with integrated security technologies across three business divisions: Digital Security, Financial Platforms, and Currency Technology.

G+D was founded in 1852 and today employs more than 14,500 people. In fiscal year 2025, the company generated revenue of 3.2 billion euros. G+D is represented by 118 subsidiaries and joint ventures in 41 countries. For more information: www.gi-de.com

Press Contact

Giesecke+Devrient
Christoph Lang
Head of Corporate Brand Communications and Government Relations
Phone: +49 89 4119-2164
Email: christoph.lang@gi-de.com

PR-COM
Nicole Oehl
Account Management
Phone: +49 89 59997-758
Email: nicole.oehl@pr-com.de