Ripple Targets 2028 for Quantum-Resistant XRP Ledger, Beating Google's PQC Deadline by a Year

Ripple has unveiled a multi-phase roadmap to make the XRP Ledger quantum-resistant by 2028, one year ahead of Google's widely-cited 2029 post-quantum cryptography (PQC) transition deadline and positioning XRPL as one of the first major Layer 1 blockchains to formally commit to cryptographic modernization at this scale.

The roadmap addresses a threat that has been building in the background of blockchain security discussions for years. Current public-key cryptography, including the elliptic curve algorithms underpinning most blockchain networks, relies on mathematical problems that classical computers cannot solve in any practical timeframe. Quantum computers, specifically cryptographically-relevant quantum computers (CRQCs), could theoretically break these algorithms in hours or minutes. No CRQC capable of attacking production cryptography exists today, but the engineering trajectory is clear enough that institutions are treating the threat as a planning problem rather than a hypothetical.

Google's 2029 PQC transition target has become the de facto industry benchmark since the company published its quantum computing roadmap. The National Institute of Standards and Technology (NIST) finalized its first set of post-quantum cryptographic standards in 2024, giving developers concrete algorithms to build toward. Ripple's decision to target 2028 puts XRPL ahead of that benchmark and signals that the company is treating quantum readiness as a competitive differentiator, not just a compliance checkbox. The multi-phase structure suggests a staged migration rather than a hard cutover, which matters for a live network with billions of dollars in settled transaction volume.

The technical challenge is non-trivial. Migrating a live blockchain's cryptographic primitives requires updating wallet address formats, signature schemes, and potentially consensus-layer components without breaking backward compatibility or introducing new attack surfaces. Post-quantum algorithms like CRYSTALS-Dilithium and FALCON, two of the NIST-standardized signature schemes, carry larger key and signature sizes than their elliptic curve equivalents. That size increase has direct implications for transaction throughput and ledger storage. Ripple's engineers will need to balance security guarantees against performance trade-offs on a network that currently processes roughly 1,500 transactions per second and has handled over 2.8 billion transactions in its history.

Critics of aggressive PQC timelines raise legitimate points. The absence of a working CRQC means resources spent on quantum migration today come at an opportunity cost. XRPL has scalability improvements, smart contract functionality expansion, and interoperability features that could arguably deliver more near-term value to users. There is also a less-discussed risk: early adopters of new cryptographic standards sometimes inherit vulnerabilities that only surface after broader scrutiny. The history of cryptography includes algorithms that looked solid at standardization and broke under sustained academic pressure. Ripple's roadmap will need to track NIST's ongoing post-quantum standardization work closely and retain flexibility to pivot if weaknesses emerge.

The case for moving early is stronger for blockchain networks than for most other systems. Blockchain's immutability is a double-edged sword in a post-quantum world. Transactions recorded today under current cryptographic standards remain on-chain indefinitely. If a CRQC eventually breaks elliptic curve cryptography, historical signatures could theoretically be forged or private keys derived from public keys already visible on the ledger. The "harvest now, decrypt later" attack vector, where adversaries collect signed data today to break it once quantum hardware matures, is a real concern for long-lived assets. For a network like XRPL that processes cross-border payments and is increasingly used in tokenized asset settlement, that exposure is material.

Ripple's roadmap, if executed on schedule, positions XRPL as a reference implementation for blockchain PQC migration. Other Layer 1 networks are watching. Ethereum's research community has discussed quantum resistance in the context of its long-term roadmap, but no comparable formal commitment with a specific date exists. Bitcoin's conservative upgrade process makes a near-term PQC transition structurally difficult. The first major network to complete a clean migration will generate significant technical documentation and community knowledge that others can build on. Whether XRPL ultimately fills that role depends entirely on execution, but Ripple has at minimum forced a conversation the broader industry can no longer defer.