PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Google Builds Quantum-Proof Encryption for Chrome

Breaking HTTPS encryption would be too easy for quantum computers.

 & Tom Brant Managing Editor

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

Google engineers are concerned that the advanced cryptography capabilities of future quantum computers will make it laughably easy to break even the most secure encryption available today. So they're working on modifications to the Chrome browser that will use so-called post-quantum algorithms to try and stump code breakers of the future.

If you're a little fuzzy on the intersection between quantum computing, cryptography, and encryption, PCMag recently visited the Los Alamos National Laboratory in New Mexico to get some real quantum computing engineers to explain the basics.

Essentially, Los Alamos engineers are betting that quantum cryptography could confound modern spies by placing encrypted data inside an indivisible photon. According to Google, it could just as easily crack today's HTTPS encryption.

"[A] hypothetical, future quantum computer would be able to retrospectively decrypt any Internet communication that was recorded today, and many types of information need to remain confidential for decades," Google engineer Matt Braithwaite explained in a blog post. "Thus even the possibility of a future quantum computer is something that we should be thinking about today."

Enter post-quantum cryptography in Chrome. It's an experiment that enables a small fraction of connections between desktop Chrome browsers and Google's servers to use post-quantum encryption key exchanges on top of the usual HTTPS encryption method, known as an elliptic-curve key exchange algorithm.

Of course, quantum computers are mostly a future dream (though IBM says it is on the cusp of building one), so it will be hard for Google to measure the success of its experiment.

"The post-quantum algorithm might turn out to be breakable even with today's computers, in which case the elliptic-curve algorithm will still provide the best security that today's technology can offer," Braithwaite wrote. "Alternatively, if the post-quantum algorithm turns out to be secure then it'll protect the connection even against a future, quantum computer."

The post-quantum algorithms are currently running in the experimental Canary version of Chrome; you can tell whether it's being used by opening the security panel and looking for "CECPQ1," Google says.

But don't expect them to stick around.

"We explicitly do not wish to make our selected post-quantum algorithm a de-facto standard," Braithwaite wrote. "To this end we plan to discontinue this experiment within two years, hopefully by replacing it with something better."

About Our Expert

Tom Brant

Tom Brant

Managing Editor

I’m a managing editor at PCMag.com focused on PC hardware. Reading this during the day? Then you've caught me testing gear and editing reviews of Wi-Fi routers, printers, laptops, and tons of other personal tech. (Reading this at night? Then I’m probably dreaming about all those cool products.) I’ve covered the consumer tech world as an editor, reporter, and analyst since 2015.

I've covered most major consumer tech events, including CES, Computex, Google I/O, and IFA. I've also appeared on CBS News, in USA Today, and at many other outlets to offer analysis on breaking technology news.

Before I joined the tech-journalism ranks, I wrote on topics as diverse as Borneo's rainforests, Middle Eastern airlines, and Big Data's role in presidential elections. A graduate of Middlebury College, I also have a master's degree in journalism and French Studies from New York University.

The Technology I Use

While most people buy a phone or laptop and stick with it for years, I’m lucky enough to use devices based on Android, iOS, macOS, and Windows daily as part of my job. As a result, I cycle through lots of tech in addition to my IT-issue work laptop. (Yes, that's a ThinkPad.) Personally, I’ve also owned a lot of tech products both cutting-edge and cringeworthy, from the Nintendo GameCube and the original MacBook to the Palm m105 and the CueCat.

Read full bio