PQC deadlines · global

How Exposed Are You Today and Will You Make the Deadline?

Global PQC dates are set, but the algorithms are not converging. CNSA 2.0 compliance starts in 2027. Most nations target 2035 for full migration. China is running its own algorithm competition, with first-round evaluation due by June 2027. Organizations with cross-jurisdictional exposure face migration tracks with varied algorithm requirements. The timeline below helps show you who expects what and when. [PQ]probe tells you if you're getting closer or further away.

In effect Ahead 37 of 37 dates
2025
PCI PCI DSS March IN EFFECT
Crypto inventory mandatory (PCI DSS 4.0.1, requirement 12.3.3)
🇺🇸 United States IN EFFECT
CNSA 2.0 support-and-prefer date for software and firmware signing, web browsers and servers, and cloud services
🇰🇷 South Korea IN EFFECT
Pilot transition projects begin, 2025–2028 (2025 round: energy, healthcare, administration)
2026
Today · Nov 2026
🇺🇸 United States June IN EFFECT
OMB M-26-15 orders the federal migration; agency migration plans due within 120 days
🇺🇸 United States September IN EFFECT
FIPS 140-2 certificates moved to Historical; Historical modules should not be included in new federal procurements
🇺🇸 United States
CNSA 2.0 support-and-prefer date for traditional networking equipment (VPNs, routers)
🇪🇺 European Union December
National transition plans in place and the first steps on high-risk use cases begun (coordinated roadmap)
🇩🇪 Germany December
Initial cryptographic inventory complete (national guideline dated 11 September 2026, published 12 October 2026)
2027
🇺🇸 United States January
All new NSS acquisitions must be CNSA 2.0 compliant
🇫🇷 France
ANSSI aims to require PQC for products entering qualification from 2027
🇺🇸 United States March
CBOM minimum elements due from CISA and NIST (EO 14412)
🇨🇳 China June
ICCS first-round evaluation of 84 public-key candidates expected complete
2029
🏢 Google VENDOR
PQC migration timeline set to 2029 (vendor timeline, not regulatory deadline)
🏢 Cloudflare VENDOR
Full post-quantum security including authentication (vendor commitment, matching Google)
🏢 Microsoft VENDOR
Quantum Safe Program: goal to transition products and services to PQC by 2029, moved forward from 2033 on 30 June 2026 (vendor goal)
2030
🇺🇸 United States
NIST IR 8547: RSA, ECDSA, EdDSA, ECDH and DH deprecated after 2030
🇺🇸 United States
Software/firmware signing and traditional networking equipment (VPNs, routers) exclusively CNSA 2.0
🇺🇸 United States January
Federal agencies support TLS 1.3 or a successor (EO 14306, amending EO 14144)
🇺🇸 United States December
Federal HVAs & high-impact systems: PQC for key establishment (EO 14412)
🇺🇸 United States December
Equipment and services unable to support CNSA 2.0 phased out (CNSSP 15)
🇦🇺 Australia
RSA, DH, ECDH and ECDSA will not be approved beyond 2030 (ASD ISM)
🇪🇺 European Union December
High-risk use cases migrated; quantum-vulnerable public-key mechanisms no longer used on their own (coordinated roadmap)
🇩🇪 Germany December
Very high protection requirements: transition to quantum-safe key agreement should take place by the end of 2030 (BSI TR-02102-1)
2031
🇺🇸 United States December
Federal HVAs & high-impact systems: PQC for digital signatures (EO 14412)
🇺🇸 United States December
CNSA 2.0 algorithms mandated for NSS (CNSSP 15)
🇩🇪 Germany December
Classical-only key agreement recommended only until the end of 2031 (BSI TR-02102-1)
2032
G7 G7 Financial
Most critical financial systems migrated, 2030 to 2032 (G7 Cyber Expert Group statement, January 2026)
2033
🇺🇸 United States
Exclusive CNSA 2.0 use for servers, cloud, operating systems, niche equipment
2035
🇺🇸 United States
NSM-10 goal for quantum resistance; NSA expects the NSS transition to be complete by 2035, and intends it well ahead of that
🇺🇸 United States
NIST IR 8547: all quantum-vulnerable public-key algorithms disallowed after 2035
🇬🇧 United Kingdom
Full PQC migration complete
🇩🇪 Germany
Classical signatures recommended only until the end of 2035 (BSI TR-02102-1)
🇪🇺 European Union
Medium-risk use cases migrated; as many systems as possible on PQC
G7 G7 Financial
Overall target date the G7 Cyber Expert Group statement cites for the financial sector
🇨🇦 Canada
Non-classified IT complete
🇯🇵 Japan
Full PQC transition (government agencies, NCO interim report)
🇰🇷 South Korea
Full PQC transition

The dates above are set by the bodies named. Some are requirements and some are recommendations; the frameworks below spell out which. [PQ]probe tracks whether you're improving, degrading, or stable over time, so you know if you're closing the gap or falling behind.

United States (NSA CNSA 2.0)

DateRequirement or recommendation
Aug 2024NIST releases final PQC standards (ML-KEM, ML-DSA, SLH-DSA)
2025Support and prefer CNSA 2.0: software and firmware signing, web browsers and servers, cloud services
2026Support and prefer CNSA 2.0: traditional networking equipment (VPNs, routers)
Jan 2027All new NSS acquisitions must be CNSA 2.0 compliant
2030Software/firmware signing and traditional networking equipment (VPNs, routers) exclusively CNSA 2.0
Dec 2030Equipment and services that cannot support CNSA 2.0 phased out (CNSSP 15)
Dec 2031CNSA 2.0 algorithms mandated across NSS unless excepted (CNSSP 15)
2033Exclusive CNSA 2.0 use for web browsers/servers, cloud services, operating systems, niche equipment; custom and legacy updated or replaced
2035NSM-10 goal for quantum resistance; NSA expects the NSS transition to be complete by 2035, and intends it well ahead of that
Targeting CNSA 2.0 compliance? Track your trajectory

United States Civilian (Executive Order 14412)

DateRequirement or recommendation
Jun 2026EO 14412 "Securing the Nation Against Advanced Cryptographic Attacks" signed; NSS carved out and remain on CNSA 2.0
Jun 2026OMB M-26-15 orders the migration; agency migration plans due within 120 days
Mar 2027CBOM minimum elements due from CISA and NIST, 270 days after the order
Jan 2030Federal agencies support TLS 1.3 or a successor (EO 14306, amending EO 14144)
Dec 2030Federal high value assets & high impact systems using PQC for key establishment
Dec 2030EO 14412 directs a proposed FAR rule requiring covered contractors to comply with NIST FIPS, including PQC FIPS, by 31 December 2030
Dec 2031Federal high value assets & high impact systems using PQC for digital signatures
Measuring against the federal deadline? Track your trajectory

United States Civilian (NIST IR 8547)

DateRequirement or recommendation
Oct 2026Final report published; the initial public draft of November 2024 carried the same dates
2030All quantum-vulnerable public-key algorithms (RSA, ECDSA, EdDSA, DH, ECDH, MQV) deprecated after 2030
2035All quantum-vulnerable public-key algorithms disallowed, including RSA-3072 and P-384. Hybrid PQC + classical modes remain allowed
Still on RSA-2048 or P-256? See where it lives

European Union

DateRequirement or recommendation
Dec 2026National transition plans in place; first steps on high-risk use cases begun
Dec 2030High-risk use cases migrated; quantum-vulnerable public-key mechanisms no longer used on their own
2035Medium-risk use cases migrated; as many systems as possible on PQC
Need to demonstrate progress to regulators? See your trend data

G7 Financial Sector

DateRequirement or recommendation
Jan 2026G7 Cyber Expert Group statement and roadmap: six phases from awareness and preparation to validation and monitoring, with no dates attached to the phases
2030-2032Migration of the most critical systems, the period the statement gives for critical systems across G7 jurisdictions
2035Overall target date the statement cites for financial sector migration
Board asking about quantum preparedness? Get trajectory reports

National Timelines

CountryAgencyKey dateRequirement or recommendation
🇬🇧 United KingdomNCSC2028Define migration goals, full discovery, initial plan
🇬🇧 United KingdomNCSC2031Carry out highest-priority migration activities
🇬🇧 United KingdomNCSC2035Full migration complete
🇩🇪 GermanyBMI/BSI2026Initial cryptographic inventory complete (national guideline dated 11 September 2026, published 12 October 2026)
🇩🇪 GermanyBSI2030Very high protection requirements: transition to quantum-safe key agreement should take place by the end of 2030 (TR-02102-1)
🇩🇪 GermanyBSI2031Classical-only key agreement recommended only until the end of 2031 (TR-02102-1)
🇩🇪 GermanyBSI2035Classical signatures recommended only until the end of 2035 (TR-02102-1)
🇫🇷 FranceANSSI2027ANSSI aims to require PQC for products entering qualification
🇦🇺 AustraliaASD2030RSA, DH, ECDH and ECDSA will not be approved beyond 2030 (ISM)
🇨🇦 CanadaCCCS2031High-priority systems migrated
🇨🇦 CanadaCCCS2035Complete PQC transition for non-classified IT
🇯🇵 JapanNCO2035Government agencies on PQC (interim report, November 2025)
🇰🇷 South KoreaMSIT2035National cryptosystem converted to PQC (government master plan)
🇨🇳 ChinaICCSJun 2027First-round evaluation of 84 public-key candidates expected complete
🇨🇳 ChinaICCSTBDFull migration timeline not yet announced

Regulatory Mandates (Already In Effect)

RegulationEffectivePQC-relevant requirement
PCI DSS 4.0.1Mar 2025Annual crypto inventory + cipher review (Req 12.3.3)
NIS2 Directive (EU)Oct 2024Cybersecurity risk management across 18 critical sectors
DORA (EU)Jan 2025Policy on encryption and cryptographic controls, updated for developments in cryptanalysis (RTS 2024/1774 Art. 6)
OMB M-23-02 (US)Nov 2022Federal agencies must inventory crypto systems
OMB M-26-15 (US)Jun 2026Execution of the federal PQC migration; agency migration plans within 120 days
FIPS 140-2 sunset (US)Sep 2026CMVP moves remaining FIPS 140-2 certificates to Historical; Historical modules should not be included in new federal procurements

National Agency Algorithm Recommendations and Status

AgencyDigital signaturesKey encapsulation
NIST (US)ML-DSA, SLH-DSAML-KEM (HQC coming)
NSA (US)ML-DSA-87, LMS/XMSS (firmware and software signing)ML-KEM-1024
BSI (DE)SLH-DSA, ML-DSA L3/L5, LMS/XMSSML-KEM-768/1024, FrodoKEM, Classic McEliece
ANSSI (FR)ML-DSA L3/L5, FN-DSA L5, SLH-DSA, XMSS/LMSML-KEM L3/L5, FrodoKEM
NCSC (UK)ML-DSA-65, SLH-DSA, LMS/XMSSML-KEM
CRYPTREC (JP)under evaluation (ML-DSA, SLH-DSA in a draft revision)ML-KEM-768/1024
MSIT/KpqC (KR)used in 2025 pilots: ML-DSA, SLH-DSA, AIMer, HAETAEused in 2025 pilots: ML-KEM, NTRU+, SMAUG-T
ICCS (CN)TBD (84 first-round public-key candidates, September 2026)TBD (candidates include Scloud+)

Official sources

NIST IR 8547: Transition to Post-Quantum Cryptography Standards (final, October 2026) NSA CNSA 2.0 Post-Quantum Cybersecurity Resources NSA Post-Quantum Cryptography Resource Hub NSA CNSA 2.0 advisory (PDF) White House: EO 14412 "Securing the Nation Against Advanced Cryptographic Attacks" OMB memoranda, including M-26-15 "Execution of the Migration to Post-Quantum Cryptography" EU Coordinated Implementation Roadmap for PQC Germany BMI, BMDS and BSI: national post-quantum guideline (press release, 12 October 2026) France ANSSI: post-quantum cryptography Germany BSI: TR-02102 Cryptographic Mechanisms G7 Cyber Expert Group: statement on a coordinated roadmap for the financial sector (January 2026) G7 Cyber Expert Group: Quantum Readiness Roadmap (PDF) UK NCSC: Timelines for Migration to Post-Quantum Cryptography Australia ASD: Planning for Post-Quantum Cryptography Canada CCCS: Roadmap for PQC Migration (ITSM.40.001) PCI Security Standards Council: PCI DSS Europol: Post-Quantum Cryptography Report (PDF) Japan CRYPTREC: Cryptography Research and Evaluation Committees Korea KISA: Korea Internet & Security Agency China ICCS: Next-generation Commercial Cryptographic Algorithms Program (NGCC), announcement of 5 February 2025 Microsoft: accelerating the quantum-safe timeline (30 June 2026)

Will you hit these dates at your current pace?

Every probe adds to your history. [PQ]probe projects your rate of change onto the deadlines above.

Run free probe Book an assessment