Unprecedented breakthroughs in quantum computers and algorithms have shortened estimates of when classical asymmetric encryption will be officially broken (called Q-day) to 2030 or sooner, requiring migration to post-quantum cryptography on a tighter timeline. How legitimate is this threat? And will open source software be ready when Q-day happens?

We'll talk facts: busting the myth that Q-day is "always 10 years away" by putting emerging academic research into context and discussing which developments alter threat models (and which do not). High-level information will be deliberately project-agnostic and accessible to laypersons. Then, we conduct a survey of critical open source infrastructure and their PQC readiness, from language libraries to popular Linux Foundation projects, covering topics including confidential computing, observability, AI applications and more. The audience will walk away with suggested action items, prioritized blockers, and opportunities to collaborate.