Sunny Ray welcomes quantum strategist Brian back to the show, his third appearance, to unpack why 2027 has suddenly become a critical deadline for quantum readiness. France recently ordered software vendors working with its government to adopt post-quantum cryptography by 2027, moving up earlier targets of 2031 and 2035. Days later the United States issued executive orders requiring post-quantum cryptography for government systems by 2030. Brian explains that while a fault-tolerant quantum computer does not yet exist, the harvest-now-decrypt-later threat makes preparation urgent, since encrypted data stolen today could be broken open once quantum machines mature. He argues the real bottleneck is not funding, which flows in the billions, but scarce talent, and points to his recent TEDx talk at Lakehead University encouraging students to pursue quantum careers instead of AI-displaced entry-level roles. The conversation also covers AT&T's new partnership with D-Wave, industry consolidation, and why commercialization, not qubit counts, will determine which quantum companies ultimately win.
Quantum strategist Brian explains why France and the US just turned 2027 and 2030 into hard deadlines for quantum security.
What does it mean that quantum is getting a deadline in 2027?
France just told every software vendor working with its government that by 2027 they must have post-quantum cryptography in place. Previous deadlines were 2031 and 2035, so this moved forward dramatically. It's the first time a government has been this specific and this close, and it's forcing other countries and companies to ask whether they need similar timelines.
Why is France leading the charge on this instead of the US or China?
Europe tends to excel at regulation and standards, and France has been embedded in quantum for years. They recognized that a fault-tolerant quantum computer could eventually break RSA 2048 and ECC encryption, and that adversaries are already harvesting encrypted data to decrypt later. So they mandated post-quantum cryptography layers, which are commercially available today, to protect against that future risk.
If a fault-tolerant quantum computer doesn't even exist yet, are we securing against a real threat or just hedging against a maybe?
It's real. We've seen exponential progress in the ratio of physical to logical qubits over the last couple of years, faster than expected. I actually think fault tolerance is becoming an outdated term, we should be talking about reliability, accuracy and scalability instead. It's not a question of if a powerful quantum computer arrives, it's simply a question of when.
Should companies be losing sleep over data they're sending today because of harvest now, decrypt later?
Absolutely. Company hacks already happen constantly, but attackers usually can't unencrypt what they steal yet. The real danger comes once a quantum computer can decrypt that stolen data. If it's old data, maybe it doesn't matter much, but near-term data that gets exposed later becomes a massive problem for any corporation or institution holding it.
Is 2027 actually achievable, or is France writing a check the industry can't cash?
The shield already exists, dozens of companies sell post-quantum cryptography solutions today. The problem isn't availability, it's adoption. So few companies are actually implementing it or mapping out their roadmap. We need to separate the sword from the shield, the protective technology is ready now, we just need more organizations to actually deploy it before a fault-tolerant computer arrives.
What was the TEDx talk about, and how did it go?
It was held at Lakehead University in Thunder Bay, and it was the most preparation I've ever put into a talk after doing thousands over 30 years. I wanted to inspire students to see quantum as a career, especially since AI native restructuring was wiping out entry-level jobs. Predictions point to roughly 250,000 quantum jobs by 2030 and 840,000 by 2035. After my talk, every one of the 40 workshop attendees came up with questions.
Is the real bottleneck talent rather than funding?
Funding isn't the problem, billions are pouring into this space through IPOs and SPACs. The bottleneck is talent. There are over a thousand quantum companies today, and I expect a wave of mergers and acquisitions as the industry consolidates and pulls talent together from across organizations, alongside organic growth in the talent pool.
What ultimately determines which quantum companies win, the flashy newcomers or the quiet veterans?
The winners will be the ones who understand commercialization, not just qubit counts or error correction rates. It's about selling business benefits and scalability rather than technical specs. Companies like AT&T partnering with D-Wave, a 27-year-old company, show that established players who can move technology into real revenue-generating use cases will come out ahead.
Building something daring? Sunny talks to founders like this every day. Fifteen minutes to see if your story belongs on the stage.
Claim your pre-interview