An indicator of that may be the fact that the NSA is in the process of finalizing their selection of quantum resistant algorithms. After that expect those algor

An indicator of that may be the fact that the NSA is in the process of finalizing their selection of quantum resistant algorithms. After that expect those algorithms to end up in the FIPS 140 certification process and percolating into requirements for government agencies to use. The NSA has an interest in making sure that classified information stays that way for as long as the classification lasts. That is at least 25 years, potentially up to 75 years (src: https://en.wikipedia.org/wiki/Classified_information_in_the_United_States#Automatic_declassification https://en.wikipedia.org/wiki/Classified_information_in_the_...) so one could infer that the NSA believes there is a reasonable chance quantum computers will exist and be able to break classical encryption within that timeframe.