Search & fact check with cited sources for What has the ISO adopted regarding quantum resistant encryption, what is the Classic McEliece algorithm (its origins, tradeoff, and role in international standardization), and what recent developments (Google's 2029 migration deadline, r

2. Classic McEliece — Origins, Tradeoff, and Standardization Role

Origins. Robert J. McEliece published the original cryptosystem in 1978, based on the hardness of decoding random binary Goppa codes — a problem that remains NP-hard and is not known to be solvable by quantum computers . Classic McEliece is the direct descendant, using the improved Niederreiter dual variant (syndrome-based) rather than the original codeword-based scheme, but retaining the same core security assumption . It is "the oldest public-key encryption scheme still regarded as secure" .

Key tradeoff — massive public keys. Classic McEliece's defining weakness is its public key size: typically 0.25 to 1.3 megabytes (e.g., 1,047,319 bytes for one parameter set) . This is orders of magnitude larger than RSA or ECC keys, making it unsuitable for many constrained environments (IoT, smart cards, TLS handshakes with limited bandwidth). Its strength, however, is that its security is extraordinarily well-understood and conservative — no practical cryptanalytic improvements have been found in over 45 years .

Role in international standardization.

Classic McEliece is positioned as a conservative backup or second line of defense: if lattice-based schemes (ML-KEM / CRYSTALS-Kyber) are ever broken, code-based cryptography provides a mathematically independent fallback .

3. Recent Developments Accelerating PQC Urgency

Google's 2029 migration deadline. On March 25, 2026, Google published a blog post by VP of Security Engineering Heather Adkins and Senior Staff Cryptographer Sophie Schmieg titled "Quantum frontiers may be closer than they appear," setting an internal deadline of 2029 to complete PQC migration across all Google systems . This moved Q-Day forward by roughly six years relative to prior industry expectations aligned with NIST's 2035 or NSA's 2031 timelines . Google cited faster-than-expected advances in quantum hardware and error correction .

Reduced qubit estimates for breaking elliptic curve cryptography. Google's updated timeline was driven in part by dramatically lowered resource estimates for Shor's algorithm attacks on ECC. Newer circuit-optimization techniques have reduced the estimated number of physical qubits needed to break 256-bit elliptic curve cryptography from millions to potentially hundreds of thousands, making a cryptographically relevant quantum computer feasible sooner than previously assumed .

Cloudflare's matching timeline. Cloudflare has publicly aligned with a similar urgency, announcing plans to complete its PQC migration on a timeline that matches Google's 2029 window. Industry analysts note that Cloudflare has been an early deployer of post-quantum TLS (including the X25519Kyber768 hybrid key agreement) and is accelerating full production deployment .

Harvest-now-decrypt-later (HNDL) concerns. Google explicitly cited "store-now, decrypt-later" risk as a key driver . Adversaries are already collecting encrypted traffic — VPN connections, financial data, state secrets, cryptocurrency communications — with the intention of decrypting it once a quantum computer becomes available. This means that data encrypted today with RSA or ECC is already at risk, creating urgency to migrate before a quantum break, not after .

June 2026 U.S. executive order. In June 2026, the Biden administration issued an executive order mandating that all U.S. federal agencies accelerate migration to post-quantum cryptography, with binding deadlines for inventory, assessment, and transition plans. This builds on the 2022 Quantum Computing Cybersecurity Preparedness Act and the 2024 NIST PQC standards (FIPS 203/204/205), converting voluntary guidelines into federal requirements . Combined with Google and Cloudflare's 2029 targets, the U.S. government is now pushing in the same direction with regulatory force.

Summary of the Convergence

The combination of ISO's official standards (Classic McEliece, FrodoKEM), NIST's finalized primary algorithms (ML-KEM, ML-DSA, SLH-DSA) , Google's 2029 deadline, falling qubit estimates, Cloudflare's matching timeline, HNDL threats already in motion, and a June 2026 U.S. executive order has compressed the PQC migration window from a vague 2030s problem to a concrete ~3-year deadline. The standards infrastructure is now in place; the remaining challenge is execution at scale.