Cloud Infrastructure
| Product | Status | Key exchange by default | Grade | Since Q2 | |
|---|---|---|---|---|---|
| Amazon Web Services AWS core services (STS, EC2, SES) |
available vendor material: deployed · not by default on every host |
X25519MLKEM768, x25519 | D | new | |
|
Vendor material
Supported on request
SecP256r1MLKEM768, X25519MLKEM768
not by default on every host Certificate signature
SHA256-RSA
Weakest offered
none
Serving
own
Trajectory
measured since 29 October 2026 · first post-quantum reading 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Amazon Web Services Amazon S3 |
deployed | X25519MLKEM768 | D | ▷ | |
|
Vendor material
Supported on request
SecP256r1MLKEM768, X25519MLKEM768
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Microsoft Azure core services (Resource Manager, Entra ID, Communication Services) |
announced | X25519MLKEM768, secp384r1, secp521r1 | D | new | |
|
Vendor material
Supported on request
SecP256r1MLKEM768, X25519MLKEM768
not by default on every host Certificate signature
SHA256-RSA, SHA384-RSA
Weakest offered
none
Serving
own
Trajectory
measured since 18 June 2026 · first post-quantum reading 4 September 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Google Google Cloud core services (Compute, IAM, Cloud Storage) |
deployed | X25519MLKEM768 | F | new | |
|
Vendor material
Supported on request
X25519MLKEM768
Certificate signature
ECDSA-SHA256
Weakest offered
TLS_RSA_WITH_3DES_EDE_CBC_SHA
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 18 June 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Google Google Workspace (Drive and APIs) |
deployed | X25519MLKEM768 | F | ▲ | |
|
Vendor material
Supported on request
X25519MLKEM768
Certificate signature
ECDSA-SHA256
Weakest offered
TLS_RSA_WITH_3DES_EDE_CBC_SHA
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Google Google Workspace (Gmail mail hosts) |
none | X25519MLKEM768 | F | ▷ | |
|
Vendor material
Ciphers for Gmail SMTP TLS connections, 2026-10-26
Split from google-workspace: mail hosts carry their own reading
Supported on request
X25519MLKEM768
Certificate signature
ECDSA-SHA256
Weakest offered
TLS 1.0, TLS_RSA_WITH_3DES_EDE_CBC_SHA
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 12 September 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Dropbox Dropbox |
none | x25519 | C | ▷ | |
|
Vendor material
Supported on request
none
Certificate signature
ECDSA-SHA384
Weakest offered
none
Serving
own
Trajectory
measured since 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Box Box |
none | x25519 | C | ▷ | |
|
Vendor material
no dated vendor material
Supported on request
none
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
hosted: Google
Trajectory
measured since 18 June 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Internxt Internxt Drive |
available vendor material: deployed · not by default on every host |
X25519MLKEM768, x25519 | D | ⧨ | |
|
Vendor material
Supported on request
X25519Kyber768Draft00, X25519MLKEM768
not by default on every host Certificate signature
ECDSA-SHA256, SHA256-RSA
Weakest offered
none
Serving
hosted: Cloudflare, hosted: OVH
Trajectory
measured since 29 October 2026 · first post-quantum reading 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
Browsers and CDNs
| Product | Status | Key exchange by default | Grade | Since Q2 | |
|---|---|---|---|---|---|
| Cloudflare Cloudflare edge, API, WARP and Tunnel |
deployed | X25519MLKEM768 | F | ▷ | |
|
Vendor material
Post-quantum cryptography (PQC), 2026-07-03
region1.v2.argotunnel.com:7844 measures Cloudflare Tunnel's TLS fallback path; QUIC is the primary transport
Supported on request
X25519Kyber768Draft00, X25519MLKEM768
Certificate signature
ECDSA-SHA256, ECDSA-SHA384
Weakest offered
TLS 1.0, none
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 18 June 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Akamai Akamai edge and control |
deployed | X25519MLKEM768 | A | ▷ | |
|
Supported on request
X25519MLKEM768
Certificate signature
ECDSA-SHA384, SHA256-RSA
Weakest offered
none
Serving
edge: Akamai
Trajectory
measured since 18 June 2026 · first post-quantum reading 26 July 2026 · last classical reading 2 August 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Fastly Fastly edge and API |
deployed | X25519MLKEM768 | D | new | |
|
Vendor material
Supported on request
X25519MLKEM768
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
edge: Fastly
Trajectory
ML-KEM negotiated on every scan since measurement began, 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Google Chrome |
deployed | not measured | — | ▷ | |
|
Vendor material
A new path for Kyber on the web, 2024-09-13
not measured: Client software; status from release notes
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Apple Safari |
deployed | not measured | — | ▷ | |
|
Vendor material
not measured: Client software; status from release notes
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Mozilla Firefox |
deployed | not measured | — | ▷ | |
|
Vendor material
not measured: Client software; status from release notes
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Microsoft Edge |
deployed | not measured | — | new | |
|
Vendor material
not measured: Client software; status from release notes
Against CNSA 2.0
class year 2025 · not measured
| |||||
Networking
| Product | Status | Key exchange by default | Grade | Since Q2 | |
|---|---|---|---|---|---|
| Fortinet FortiGate and FortiWeb (FortiOS) |
available | not measured | — | ▷ | |
|
Vendor material
Fortinet Advances Quantum-Safe Security to Guard Against Emerging Quantum Threats, 2025-07-22 · opt-in
not measured: Appliance; status from FortiOS release notes
Against CNSA 2.0
class year 2026 · not measured
| |||||
| Fortinet Fortinet cloud services (FortiCloud, FortiGuard, FortiToken Cloud) |
none | x25519 | F | new | |
|
Vendor material
no dated vendor material
FortiGuard query and update services carry device queries and telemetry from every FortiGate
Supported on request
none
Certificate signature
SHA256-RSA
Weakest offered
TLS_RSA_WITH_3DES_EDE_CBC_SHA, none
Serving
hosted: CENTURYLINK-LEGACY-SAVVIS - CenturyLink Communications, LLC, hosted: NTT-DATA-2914 - NTT America, Inc., own
Trajectory
measured since 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2026: missed
Hosts
| |||||
| Palo Alto Networks PAN-OS firewalls |
available | not measured | — | ▷ | |
|
Vendor material
Support for Post-Quantum Features, 2026-07-20 · opt-in
not measured: Appliance; status from PAN-OS release notes
Against CNSA 2.0
class year 2026 · not measured
| |||||
| Palo Alto Networks Prisma Access, SASE and WildFire services |
announced | X25519MLKEM768, secp256r1, x25519 | D | new | |
|
Vendor material
Supported on request
X25519MLKEM768
not by default on every host Certificate signature
SHA256-RSA, SHA384-RSA
Weakest offered
none
Serving
hosted: Amazon, hosted: Google
Trajectory
measured since 18 June 2026 · first post-quantum reading 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2026: missed
Hosts
| |||||
| Cisco Secure Firewall (FTD, ASA) |
announced | not measured | — | ▷ | |
|
Vendor material
not measured: Appliance; status from FTD and ASA release notes
Against CNSA 2.0
class year 2026 · not measured
| |||||
| Cisco Cisco cloud services (Meraki, Umbrella, Webex) |
announced | X25519MLKEM768, x25519 | C | new | |
|
Vendor material
Webex Suite Meetings Security technical paper, 2026-07-14
Supported on request
SecP256r1MLKEM768, SecP384r1MLKEM1024, X25519Kyber768Draft00, X25519MLKEM768
not by default on every host Certificate signature
SHA256-RSA
Weakest offered
none
Serving
edge: Amazon CloudFront, edge: Cloudflare, hosted: MERAKI - Meraki LLC, own
Trajectory
measured since 29 October 2026 · first post-quantum reading 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2026: missed
Hosts
| |||||
| Juniper Networks / HPE Junos routers and firewalls |
none | not measured | — | ▷ | |
|
Vendor material
no dated vendor material
not measured: Appliance; status from Junos release notes
Against CNSA 2.0
class year 2026 · not measured
| |||||
| Juniper Networks / HPE Juniper Mist cloud |
none | X25519MLKEM768 | — | new | |
|
Vendor material
no dated vendor material
Supported on request
SecP256r1MLKEM768, SecP384r1MLKEM1024, X25519MLKEM768
not by default on every host Certificate signature
SHA256-RSA
Weakest offered
none
Serving
hosted: Amazon
Trajectory
measured since 29 October 2026 · first post-quantum reading 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: — · post-quantum by default against class year 2026: no scan yet
Hosts
| |||||
HSM and Key Management
| Product | Status | Key exchange by default | Grade | Since Q2 | |
|---|---|---|---|---|---|
| Thales Luna HSM |
available | not measured | — | ▷ | |
|
Vendor material
Luna HSM Firmware 7.9.0, 2026-07-24 · opt-in
not measured: Appliance; status from Luna firmware release notes and CMVP. No customer-facing service host resolves
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Entrust nShield HSM |
available | not measured | — | ▷ | |
|
Vendor material
nShield Security World v13.9.0 Release Notes, 2025-08-22 · opt-in
not measured: Appliance; status from nShield firmware release notes and CMVP. No customer-facing service host resolves
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Amazon Web Services AWS KMS |
deployed | X25519MLKEM768 | B | ▷ | |
|
Vendor material
Supported on request
SecP256r1MLKEM768, SecP384r1MLKEM1024, X25519MLKEM768
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Google Google Cloud KMS |
deployed | X25519MLKEM768 | F | ▲ | |
|
Vendor material
Supported on request
X25519MLKEM768
Certificate signature
ECDSA-SHA256
Weakest offered
TLS_RSA_WITH_3DES_EDE_CBC_SHA
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Microsoft Azure Key Vault and Managed HSM |
none | not measured | — | ▷ | |
|
Vendor material
not measured: Per-tenant endpoints only (<vault>.vault.azure.net, <hsm>.managedhsm.azure.net)
Against CNSA 2.0
class year 2025 · not measured
| |||||
Databases
| Product | Status | Key exchange by default | Grade | Since Q2 | |
|---|---|---|---|---|---|
| Microsoft SQL Server and Azure SQL |
none | not measured | — | ▷ | |
|
Vendor material
no dated vendor material
not measured: Per-tenant endpoint only (<server>.database.windows.net:1433)
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Amazon Web Services Amazon DynamoDB |
deployed | X25519MLKEM768 | D | ▷ | |
|
Vendor material
AWS Support for Post-Quantum Confidentiality, 2026-10-28
Split from the RDS, Aurora and DynamoDB row; the DynamoDB API endpoint is its data plane
Supported on request
SecP256r1MLKEM768, SecP384r1MLKEM1024, X25519MLKEM768
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: yes · post-quantum by default against class year 2025: met
Hosts
| |||||
| Amazon Web Services Amazon RDS and Aurora |
available | X25519MLKEM768 | D | ▲ | |
|
Vendor material
Amazon RDS for PostgreSQL supports post-quantum TLS key exchange, 2026-09-24 · opt-in
Split from the RDS, Aurora and DynamoDB row; data planes are per-instance
Supported on request
SecP256r1MLKEM768, X25519MLKEM768
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
own
Trajectory
ML-KEM negotiated on every scan since measurement began, 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| MongoDB MongoDB Atlas |
none | X25519MLKEM768, x25519 | D | ▷ | |
|
Vendor material
no dated vendor material
Supported on request
SecP256r1MLKEM768, SecP384r1MLKEM1024, X25519MLKEM768
not by default on every host Certificate signature
SHA256-RSA
Weakest offered
none
Serving
hosted: Amazon, own
Trajectory
measured since 29 October 2026 · first post-quantum reading 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Various Managed PostgreSQL |
available | not measured | — | ▲ | |
|
Vendor material
Amazon RDS for PostgreSQL now supports post-quantum TLS key exchange, 2026-09-24 · opt-in
not measured: Per-tenant endpoints only; no tenant provisioned
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Snowflake Snowflake |
none | X25519MLKEM768, x25519 | C | ▷ | |
|
Vendor material
no dated vendor material
Supported on request
X25519Kyber768Draft00, X25519MLKEM768
not by default on every host Certificate signature
ECDSA-SHA256, SHA256-RSA
Weakest offered
none
Serving
hosted: Amazon, hosted: Cloudflare
Trajectory
measured since 18 June 2026 · first post-quantum reading 18 June 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Oracle Oracle Database 26ai and OCI |
available | X25519MLKEM768, secp256r1, x25519 | C | new | |
|
Supported on request
SecP256r1MLKEM768, SecP384r1MLKEM1024, X25519MLKEM768
not by default on every host Certificate signature
ECDSA-SHA384, SHA256-RSA
Weakest offered
none
Serving
hosted: Akamai, own
Trajectory
measured since 18 June 2026 · first post-quantum reading 21 July 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
SaaS and Collaboration
| Product | Status | Key exchange by default | Grade | Since Q2 | |
|---|---|---|---|---|---|
| Salesforce Salesforce platform |
announced | x25519 | D | ▷ | |
|
Vendor material
Salesforce Post-Quantum Cryptography, 2026-03-18
Customer instances are per-tenant (<mydomain>.my.salesforce.com)
Supported on request
none
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
hosted: Amazon
Trajectory
measured since 18 June 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| ServiceNow Now Platform |
announced | X25519MLKEM768 | D | ▷ | |
|
Vendor material
Customer instances are per-tenant (<instance>.service-now.com)
Supported on request
X25519MLKEM768
Certificate signature
ECDSA-SHA384
Weakest offered
none
Serving
own
Trajectory
measured since 18 June 2026 · first post-quantum reading 23 August 2026 · last classical reading 22 August 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Workday Workday |
announced | X25519MLKEM768, x25519 | D | ▷ | |
|
Vendor material
Supported on request
X25519Kyber768Draft00, X25519MLKEM768
not by default on every host Certificate signature
ECDSA-SHA384, SHA256-RSA
Weakest offered
none
Serving
own
Trajectory
measured since 29 October 2026 · first post-quantum reading 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Slack Slack |
none | x25519 | C | ▷ | |
|
Vendor material
no dated vendor material
Supported on request
none
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
hosted: Amazon
Trajectory
measured since 2 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Microsoft Microsoft 365 (Exchange Online, Teams, SharePoint) |
announced | secp384r1, secp521r1 | D | ▷ | |
|
Vendor material
SharePoint is per-tenant (<tenant>.sharepoint.com). Six hosts: API, web, IMAP, Teams, MX and submission are distinct data planes
Supported on request
none
Certificate signature
SHA256-RSA, SHA384-RSA
Weakest offered
none
Serving
own
Trajectory
measured since 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Zoom Zoom end-to-end encryption |
available | not measured | — | ▷ | |
|
Vendor material
Zoom bolsters security offering with the inclusion of post-quantum end-to-end encryption in Zoom Workplace, 2024-05-21 · opt-in
not measured: End-to-end layer; status from Zoom security documentation
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Zoom Zoom meetings service |
none | X25519MLKEM768 | D | new | |
|
Vendor material
no dated vendor material
Supported on request
X25519Kyber768Draft00, X25519MLKEM768
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
hosted: Cloudflare
Trajectory
measured since 18 June 2026 · first post-quantum reading 18 June 2026 · last classical reading 22 June 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Signal Signal protocol (PQXDH) |
deployed | not measured | — | ▷ | |
|
Vendor material
Signal Protocol and Post-Quantum Ratchets, 2025-10-02
not measured: End-to-end layer; status from Signal protocol documentation
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Signal Signal service |
none | X25519MLKEM768 | F | new | |
|
Vendor material
no dated vendor material
Supported on request
X25519Kyber768Draft00, X25519MLKEM768
Certificate signature
SHA256-RSA
Weakest offered
TLS 1.0, TLS_RSA_WITH_3DES_EDE_CBC_SHA, none
Serving
hosted: Amazon, hosted: Cloudflare, hosted: Google
Trajectory
ML-KEM negotiated on every scan since measurement began, 29 October 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Apple iMessage (PQ3) |
deployed | not measured | — | ▷ | |
|
Vendor material
not measured: End-to-end layer; status from Apple security documentation
Against CNSA 2.0
class year 2025 · not measured
| |||||
| Apple Apple push, identity and iCloud Mail |
announced | X25519MLKEM768, x25519 | F | new | |
|
Vendor material
Apple lists six MX hosts; three kept. Seven hosts: push, identity, and the three iCloud Mail data planes (IMAP, submission, MX)
Supported on request
X25519MLKEM768
not by default on every host Certificate signature
SHA256-RSA
Weakest offered
TLS 1.0, none
Serving
edge: Akamai, own
Trajectory
measured since 29 October 2026 · first post-quantum reading 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| SAP SAP Business Technology Platform (Cloud Foundry) |
announced | x25519 | C | new | |
|
Supported on request
none
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
edge: Akamai, hosted: Amazon
Trajectory
measured since 29 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Tuta Tuta Mail service |
none | secp256r1, x25519 | F | new | |
|
Vendor material
no dated vendor material
Webmail sign-in and client API share one host; Tuta offers no IMAP or SMTP submission. Added in Q3
Supported on request
none
Certificate signature
ECDSA-SHA256, ECDSA-SHA384
Weakest offered
TLS 1.0, none
Serving
own
Trajectory
measured since 9 June 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Tuta TutaCrypt end-to-end encryption |
deployed | not measured | — | new | |
|
Vendor material
Tuta Ensures Post Quantum Cryptography For Email, 2026-08-26
not measured: End-to-end layer; status from Tuta's documentation
Against CNSA 2.0
class year 2025 · not measured
| |||||
| mailbox.org mailbox.org mail service |
none | X25519MLKEM768, x25519 | D | new | |
|
Vendor material
no dated vendor material
Six hosts: sign-in, webmail, two of five MX, IMAP and submission. Added in Q3
Supported on request
SecP256r1MLKEM768, SecP384r1MLKEM1024, X25519MLKEM768
not by default on every host Certificate signature
SHA256-RSA
Weakest offered
none
Serving
hosted: HPLS-AS - Heinlein Support GmbH
Trajectory
measured since 18 June 2026 · first post-quantum reading 31 October 2026 · last classical reading 13 November 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: missed
Hosts
| |||||
| Proton Proton Mail service |
none | X25519MLKEM768 | A | new | |
|
Vendor material
no dated vendor material
Proton offers IMAP only through its local Bridge; no public IMAP or submission host. Added in Q3
Supported on request
SecP256r1MLKEM768, X25519MLKEM768
Certificate signature
SHA256-RSA
Weakest offered
none
Serving
own
Trajectory
measured since 9 June 2026 · first post-quantum reading 18 September 2026 · last classical reading 17 September 2026 Against CNSA 2.0
ML-KEM-1024 hybrid accepted: no · post-quantum by default against class year 2025: met
Hosts
| |||||
| Proton Post-quantum OpenPGP end-to-end encryption |
available | not measured | — | new | |
|
Vendor material
Proton Mail introduces post-quantum encryption, 2026-05-05 · opt-in
not measured: End-to-end layer; status from Proton's documentation
Against CNSA 2.0
class year 2025 · not measured
| |||||
Status is read from the vendor's own dated material, linked in each card: deployed, available, announced or none. Key exchange, certificate, grade and serving are read from the product's hosts on their latest daily scan. Since Q2: ▲ improving, ▷ stable, ⧨ degrading; new for a product the Q2 edition had no row for. Open a row for the details.