{ "status": "source-verified", "compiled": "2026-10-27", "note": "Milestones of the post-quantum cryptography transition that apply in Europe, compiled from the official pages and documents of the European Commission, EUR-Lex, the NIS Cooperation Group, ENISA, national agencies, NIST, ETSI and the IETF on the date shown; each locator says where the fact was read. Dates and targets are as the sources state them; summaries are the portal's own wording and quote no text. A target is listed only when a published document sets it. Not compliance advice: check the publisher for the authoritative current version. Pending editorial review.", "upcoming_as_of": "2026-11-03", "milestones": [ { "id": "etsi-tr-103-619", "date": "2020-07", "date_text": "July 2020 (V1.1.1)", "title": "ETSI report on migration strategies to quantum-safe schemes", "institution": "ETSI (Technical Committee CYBER)", "type": "guidance", "status": "published", "summary": "ETSI published TR 103 619 V1.1.1, a technical report on strategies and recommendations for migrating to quantum-safe cryptographic schemes.", "links": [], "same_as": [ "standards:etsi-tr-103-619/etsi-tr-103-619-publication-2020-07-21-1" ], "sources": [ { "title": "ETSI: TR 103 619 V1.1.1, cover page", "url": "https://www.etsi.org/deliver/etsi_tr/103600_103699/103619/01.01.01_60/tr_103619v010101p.pdf", "retrieved": "2026-10-21", "locator": "Cover page: ETSI TR 103 619 V1.1.1 (2020-07), CYBER; Migration strategies and recommendations to Quantum Safe schemes" }, { "title": "ETSI: TR 103 619 publication archive", "url": "https://www.etsi.org/deliver/etsi_tr/103600_103699/103619/", "retrieved": "2026-10-21", "locator": "Archive listing: one version, 01.01.01_60" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "July 2020 (V1.1.1)", "upcoming": false }, { "id": "enisa-pqc-integration-study", "date": "2022-10-18", "date_text": null, "title": "ENISA study on integrating post-quantum cryptography", "institution": "European Union Agency for Cybersecurity (ENISA)", "type": "guidance", "status": "published", "summary": "ENISA published a study of the challenges of integrating post-quantum cryptography into existing protocols and systems, following its 2021 report on the state of post-quantum cryptography.", "links": [], "sources": [ { "title": "ENISA: Post-Quantum Cryptography - Integration study", "url": "https://www.enisa.europa.eu/publications/post-quantum-cryptography-integration-study", "retrieved": "2026-10-21", "locator": "Publication page: date 18 October 2022 and description" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "18 October 2022", "upcoming": false }, { "id": "eu-pqc-recommendation", "date": "2024-04-11", "date_text": null, "title": "Commission Recommendation on a coordinated PQC roadmap", "institution": "European Commission", "type": "recommendation", "status": "adopted", "summary": "Commission Recommendation (EU) 2024/1101 invited Member States to form a post-quantum cryptography sub-group of the NIS Cooperation Group and to have a coordinated implementation roadmap two years after its publication, followed by national transition plans.", "links": { "standards": [ "eu-recommendation-2024-1101" ], "eu-law": [ "pqc-recommendation-2024-1101" ] }, "same_as": [ "legislation:eu-pqc-roadmap/eu-pqc-roadmap-event-1" ], "sources": [ { "title": "EUR-Lex: Commission Recommendation (EU) 2024/1101, document information and text", "url": "https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32024H1101", "retrieved": "2026-10-21", "locator": "Document information: date of document 11/04/2024, OJ L, 2024/1101, 12.4.2024; points (4) to (7)" } ], "type_label": "EU recommendation", "status_label": "Adopted", "display_date": "11 April 2024", "upcoming": false }, { "id": "nist-fips-203-204-205", "date": "2024-08-13", "date_text": null, "title": "NIST publishes its first post-quantum standards", "institution": "National Institute of Standards and Technology (NIST)", "type": "standard", "status": "published", "summary": "NIST published its first three post-quantum cryptography standards, FIPS 203 for key encapsulation (ML-KEM) and FIPS 204 and FIPS 205 for digital signatures (ML-DSA and SLH-DSA).", "links": { "standards": [ "nist-fips-203", "nist-fips-204", "nist-fips-205" ] }, "same_as": [ "standards:nist-fips-203/nist-fips-203-publication-2024-08-13-1", "standards:nist-fips-204/nist-fips-204-publication-2024-08-13-1", "standards:nist-fips-205/nist-fips-205-publication-2024-08-13-1" ], "sources": [ { "title": "NIST CSRC: FIPS 203 (Final)", "url": "https://csrc.nist.gov/pubs/fips/203/final", "retrieved": "2026-10-21", "locator": "Publication page: date August 13, 2024, status Final" }, { "title": "NIST CSRC: FIPS 204 (Final)", "url": "https://csrc.nist.gov/pubs/fips/204/final", "retrieved": "2026-10-21", "locator": "Publication page: date August 13, 2024" }, { "title": "NIST CSRC: FIPS 205 (Final)", "url": "https://csrc.nist.gov/pubs/fips/205/final", "retrieved": "2026-10-21", "locator": "Publication page: date August 13, 2024" } ], "type_label": "Standard or specification", "status_label": "Published", "display_date": "13 August 2024", "upcoming": false }, { "id": "etsi-tr-104-016", "date": "2024-10", "date_text": "October 2024 (V1.1.1)", "title": "ETSI framework for quantum-safe migrations", "institution": "ETSI (Technical Committee CYBER)", "type": "guidance", "status": "published", "summary": "ETSI published TR 104 016 V1.1.1, a technical report that sets out a repeatable framework for migrating systems to quantum-safe cryptography.", "links": [], "same_as": [ "standards:etsi-tr-104-016/etsi-tr-104-016-publication-2024-10-25-1" ], "sources": [ { "title": "ETSI: TR 104 016 V1.1.1, cover page", "url": "https://www.etsi.org/deliver/etsi_tr/104000_104099/104016/01.01.01_60/tr_104016v010101p.pdf", "retrieved": "2026-10-21", "locator": "Cover page: ETSI TR 104 016 V1.1.1 (2024-10), CYBER; Quantum-Safe Cryptography (QSC); A Repeatable Framework for Quantum-Safe Migrations" }, { "title": "ETSI: TR 104 016 publication archive", "url": "https://www.etsi.org/deliver/etsi_tr/104000_104099/104016/", "retrieved": "2026-10-21", "locator": "Archive listing: one version, 01.01.01_60" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "October 2024 (V1.1.1)", "upcoming": false }, { "id": "joint-statement-18-member-states", "date": "2024-11-27", "date_text": null, "title": "Joint statement of national agencies: protect the most sensitive use cases by 2030", "institution": "Cybersecurity agencies of 18 EU Member States, including BSI, ANSSI and the Netherlands National Communication Security Agency", "type": "guidance", "status": "published", "summary": "Agencies of 18 Member States urged organisations to start the transition now and recommended protecting the most sensitive use cases against store-now-decrypt-later attacks by the end of 2030 at the latest; partners from 21 European states reissued it in June 2025.", "links": [], "sources": [ { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Header: partners from 18 EU member states, dated 27.11.2024; page 2, paragraph on protecting the most sensitive use cases by the end of 2030" }, { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.06.2025)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement-2025.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Header: partners from 21 European states, dated 27.06.2025" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "27 November 2024", "upcoming": false }, { "id": "nist-hqc-selection", "date": "2025-03-11", "date_text": null, "title": "NIST selects HQC as a backup to ML-KEM", "institution": "National Institute of Standards and Technology (NIST)", "type": "standard", "status": "published", "summary": "NIST selected HQC, an algorithm based on error-correcting codes, as a second key-encapsulation mechanism to back up ML-KEM, expecting a draft standard in about a year and a final standard in 2027.", "links": { "standards": [ "nist-ir-8545" ] }, "same_as": [ "standards:nist-hqc-selection/nist-hqc-selection-publication-2025-03-11-1" ], "sources": [ { "title": "NIST: NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption", "url": "https://www.nist.gov/news-events/news/2025/03/nist-selects-hqc-fifth-algorithm-post-quantum-encryption", "retrieved": "2026-10-21", "locator": "News item of 11 March 2025: the selection, the backup role and the expected draft and final standard" } ], "type_label": "Standard or specification", "status_label": "Published", "display_date": "11 March 2025", "upcoming": false }, { "id": "eccg-agreed-cryptographic-mechanisms-v2", "date": "2025-05-06", "date_text": "6 May 2025 (applicable version on the ENISA certification page; the cover says version 2.0, April 2025)", "title": "EU agreed cryptographic mechanisms add post-quantum schemes", "institution": "European Cybersecurity Certification Group (ECCG), sub-group on cryptography", "type": "guidance", "status": "published", "summary": "Version 2 of the agreed cryptographic mechanisms for EU cybersecurity certification lists post-quantum schemes such as ML-KEM, FrodoKEM, ML-DSA and SLH-DSA as agreed and recommends hybrid deployment where confidentiality must last.", "links": [], "same_as": [ "standards:eccg-acm-v2/eccg-acm-v2-publication-2025-05-06-1" ], "sources": [ { "title": "ENISA certification: EUCC guidelines on cryptography", "url": "https://certification.enisa.europa.eu/publications/eucc-guidelines-cryptography_en", "retrieved": "2026-10-27", "locator": "Section Applicable version: ECCG Agreed Cryptographic Mechanisms - version 2, dated 6 May 2025" }, { "title": "ECCG: Agreed Cryptographic Mechanisms, version 2", "url": "https://certification.enisa.europa.eu/document/download/a845662b-aee0-484e-9191-890c4cfa7aaa_en?filename=ECCG%20Agreed%20Cryptographic%20Mechanisms%20version%202.pdf", "retrieved": "2026-10-21", "locator": "Cover: Version 2.0, April 2025; section 1.4 Post-Quantum Cryptography and the tables of asymmetric mechanisms" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "6 May 2025 (applicable version on the ENISA certification page; the cover says version 2.0, April 2025)", "upcoming": false }, { "id": "eu-pqc-roadmap", "date": "2025-06-23", "date_text": null, "title": "Coordinated implementation roadmap for the transition to PQC", "institution": "NIS Cooperation Group (EU Member States, supported by the European Commission)", "type": "roadmap", "status": "published", "summary": "The NIS Cooperation Group's work stream on post-quantum cryptography published the first part of the coordinated roadmap, with milestones at the end of 2026, 2030 and 2035 and a recommendation to use standardised hybrid solutions where feasible.", "links": { "standards": [ "eu-pqc-roadmap" ] }, "same_as": [ "legislation:eu-pqc-roadmap/eu-pqc-roadmap-event-part-1", "standards:eu-pqc-coordinated-roadmap" ], "sources": [ { "title": "European Commission, Shaping Europe's digital future: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography", "url": "https://digital-strategy.ec.europa.eu/en/library/coordinated-implementation-roadmap-transition-post-quantum-cryptography", "retrieved": "2026-10-21", "locator": "Library item dated 23 June 2025, issued by the Member States with the Commission's support" }, { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Cover: Part 1, version 1.1, EU PQC Workstream, 11.06.2025; section 1, Executive Summary, and section 4, Timeline" } ], "type_label": "Roadmap or transition plan", "status_label": "Published", "display_date": "23 June 2025", "upcoming": false }, { "id": "bsi-tr-02102-1-2026", "date": "2026-01-23", "date_text": null, "title": "BSI sets end dates for classical key agreement used alone", "institution": "Federal Office for Information Security (BSI), Germany", "type": "guidance", "status": "published", "summary": "Version 2026-01 of BSI technical guideline TR-02102-1 recommends that classical key agreement no longer be used on its own after the end of 2031, or 2030 for very high protection needs, and combined with post-quantum schemes instead.", "links": { "standards": [ "bsi-tr-02102-1" ] }, "same_as": [ "standards:bsi-tr-02102-1-2026-01" ], "sources": [ { "title": "BSI: TR-02102-1 Kryptographische Verfahren, Version 2026-01 (PDF)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR02102/BSI-TR-02102.pdf?__blob=publicationFile", "retrieved": "2026-10-27", "locator": "Cover and version table (Version 2026-01, 23 January 2026)" }, { "title": "BSI: press release of 11 February 2026 on the end of classical encryption schemes", "url": "https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2026/260211_Ende_klassischer_Verschluesselungsverfahren.html", "retrieved": "2026-10-27", "locator": "Body text: end of 2031, end of 2030 for the most sensitive uses, and end of 2035 planned for classical signatures" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "23 January 2026", "upcoming": false }, { "id": "etsi-ts-103-744-v1-2-2", "date": "2026-02-05", "date_text": null, "title": "ETSI updates its quantum-safe hybrid key establishment specification", "institution": "ETSI (Technical Committee CYBER)", "type": "standard", "status": "published", "summary": "ETSI published version 1.2.2 of TS 103 744, its technical specification for hybrid key establishment that combines classical and post-quantum schemes.", "links": { "standards": [ "etsi-ts-103-744" ] }, "same_as": [ "standards:etsi-ts-103-744/etsi-ts-103-744-publication-2026-02-05-1" ], "sources": [ { "title": "ETSI: TS 103 744 publication archive", "url": "https://www.etsi.org/deliver/etsi_ts/103700_103799/103744/", "retrieved": "2026-10-27", "locator": "Archive listing: folder 01.02.02_60 dated 5 February 2026, after 01.02.01_60 (March 2025) and 01.01.01_60 (December 2020)" } ], "type_label": "Standard or specification", "status_label": "Published", "display_date": "5 February 2026", "upcoming": false }, { "id": "ietf-rfc-9935-9936", "date": "2026-03", "date_text": "March 2026", "title": "IETF standardises ML-KEM in certificates and CMS", "institution": "Internet Engineering Task Force (IETF)", "type": "standard", "status": "published", "summary": "RFC 9935 and RFC 9936, both Proposed Standards, define how ML-KEM keys appear in X.509 certificates and how ML-KEM is used in the Cryptographic Message Syntax.", "links": [], "same_as": [ "standards:ietf-rfc-9935/ietf-rfc-9935-publication-2026-03-1", "standards:ietf-rfc-9936/ietf-rfc-9936-publication-2026-03-1" ], "sources": [ { "title": "RFC Editor: RFC 9935", "url": "https://www.rfc-editor.org/info/rfc9935", "retrieved": "2026-10-27", "locator": "Information page: title, status Proposed Standard, publication date March 2026" }, { "title": "RFC Editor: RFC 9936", "url": "https://www.rfc-editor.org/info/rfc9936", "retrieved": "2026-10-27", "locator": "Information page: title, status Proposed Standard, publication date March 2026" } ], "type_label": "Standard or specification", "status_label": "Published", "display_date": "March 2026", "upcoming": false }, { "id": "anssi-pg-083-v3", "date": "2026-03-20", "date_text": null, "title": "ANSSI cryptographic mechanisms guide version 3", "institution": "National Cybersecurity Agency of France (ANSSI)", "type": "guidance", "status": "published", "summary": "Version 3.00 of the ANSSI guide on the choice and sizing of cryptographic mechanisms asks for post-quantum security for mechanisms used beyond 1 January 2030 and limits 2048-bit RSA moduli to use until the end of 2030.", "links": [], "same_as": [ "standards:anssi-pg-083-v3-00" ], "sources": [ { "title": "ANSSI: ANSSI-PG-083, guide des mécanismes cryptographiques, version 3.00 (PDF)", "url": "https://messervices.cyber.gouv.fr/documents-guides/anssi-guide-mecanismes-crypto-3.00.pdf", "retrieved": "2026-10-27", "locator": "Cover (ANSSI-PG-083, 2026-03-20); chapter 2, long-term security recommendation; section 2.2.1.1, factorisation rule" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "20 March 2026", "upcoming": false }, { "id": "nist-ir-8610", "date": "2026-05-14", "date_text": null, "title": "NIST reports on the second round of additional signatures", "institution": "National Institute of Standards and Technology (NIST)", "type": "guidance", "status": "published", "summary": "NIST IR 8610 is the status report on the second round of the NIST evaluation of additional post-quantum digital signature schemes.", "links": [], "same_as": [ "standards:nist-additional-signatures-round-3/nist-additional-signatures-round-3-publication-2026-05-14-1" ], "sources": [ { "title": "NIST CSRC: IR 8610, Status Report on the Second Round of the Additional Digital Signature Schemes", "url": "https://csrc.nist.gov/pubs/ir/8610/final", "retrieved": "2026-10-27", "locator": "Publication page: date published May 2026; history entry 05/14/26 IR 8610 (Final)" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "14 May 2026", "upcoming": false }, { "id": "ietf-rfc-9980", "date": "2026-06", "date_text": "June 2026", "title": "IETF standardises post-quantum cryptography in OpenPGP", "institution": "Internet Engineering Task Force (IETF)", "type": "standard", "status": "published", "summary": "RFC 9980, a Proposed Standard, specifies how post-quantum cryptography is used in OpenPGP.", "links": [], "same_as": [ "standards:ietf-rfc-9980/ietf-rfc-9980-publication-2026-06-1" ], "sources": [ { "title": "RFC Editor: RFC 9980", "url": "https://www.rfc-editor.org/info/rfc9980", "retrieved": "2026-10-27", "locator": "Information page: title Post-Quantum Cryptography in OpenPGP, status Proposed Standard, publication date June 2026" } ], "type_label": "Standard or specification", "status_label": "Published", "display_date": "June 2026", "upcoming": false }, { "id": "eccg-acm-v3-draft", "date": "2026-06-02", "date_text": null, "title": "Draft version 3 of the EU agreed cryptographic mechanisms", "institution": "European Cybersecurity Certification Group (ECCG), sub-group on cryptography", "type": "guidance", "status": "published", "summary": "The ECCG sub-group on cryptography put a draft version 3 of the agreed cryptographic mechanisms for EU certification to public review until the end of July 2026, with a change log.", "links": [], "same_as": [ "standards:eccg-acm-v3-draft/eccg-acm-v3-draft-publication-2026-06-02-1" ], "sources": [ { "title": "ENISA certification: EUCC guidelines on cryptography", "url": "https://certification.enisa.europa.eu/publications/eucc-guidelines-cryptography_en", "retrieved": "2026-10-27", "locator": "Introductory text (public review until the end of July 2026) and section Draft for public review (version 3 draft and change log, 2 June 2026)" } ], "type_label": "Guidance or report", "status_label": "Published", "display_date": "2 June 2026", "upcoming": false }, { "id": "ietf-rfc-10024", "date": "2026-08", "date_text": "August 2026", "title": "IETF standardises hybrid ML-KEM key agreement for TLS 1.3", "institution": "Internet Engineering Task Force (IETF)", "type": "standard", "status": "published", "summary": "RFC 10024, a Standards Track RFC, defines three hybrid key agreement mechanisms for TLS 1.3 that combine ML-KEM with an elliptic-curve Diffie-Hellman exchange.", "links": { "standards": [ "ietf-rfc-10024" ] }, "same_as": [ "standards:ietf-rfc-10024/ietf-rfc-10024-publication-2026-08-1" ], "sources": [ { "title": "RFC Editor: RFC 10024", "url": "https://www.rfc-editor.org/info/rfc10024/", "retrieved": "2026-10-21", "locator": "Information page: title and status Proposed Standard" }, { "title": "RFC Editor: RFC 10024 (text header)", "url": "https://www.rfc-editor.org/rfc/rfc10024.txt", "retrieved": "2026-10-21", "locator": "Header: Category Standards Track, August 2026; abstract" } ], "type_label": "Standard or specification", "status_label": "Published", "display_date": "August 2026", "upcoming": false }, { "id": "germany-national-pqc-guideline", "date": "2026-09-11", "date_text": "11 September 2026 (document date; the BSI page is dated 12 October 2026)", "title": "Germany's national implementation of the EU PQC roadmap", "institution": "Federal Office for Information Security (BSI), with the German federal ministries BMDS and BMI", "type": "roadmap", "status": "published", "summary": "A joint guideline of BMDS, BMI and BSI sets a German timeline aligned with the EU roadmap: preparation and planning by the end of 2026, high-risk use cases quantum-safe by the end of 2030 and medium-risk use cases by the end of 2035.", "links": [], "sources": [ { "title": "BSI: Nationale Umsetzung der EU-Roadmap zur Umstellung auf Post-Quanten-Kryptografie (download page)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Krypto/Leitlinie-Umstellung-PQC.html", "retrieved": "2026-10-21", "locator": "Download page: title, joint guideline of BMDS, BMI and BSI, date 12.10.2026" }, { "title": "BSI: Leitlinie zur Umstellung auf PQC (PDF)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Krypto/Leitlinie-Umstellung-PQC.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Header dated 11 September 2026; summary, section 3 Zeitplan and the opening of section 4" } ], "type_label": "Roadmap or transition plan", "status_label": "Published", "display_date": "11 September 2026 (document date; the BSI page is dated 12 October 2026)", "upcoming": false }, { "id": "netherlands-pqc-timetable", "date": "2026-10-05", "date_text": null, "title": "Dutch government sets its PQC migration timetable", "institution": "Government of the Netherlands", "type": "roadmap", "status": "published", "summary": "The Dutch government-wide quantum strategy sets a PQC migration timetable for central government, with high-risk use cases migrated by the end of 2030 and medium-risk ones by the end of 2035.", "links": [], "same_as": [ "standards:nl-rijksbrede-quantumstrategie-pqc-tijdpad" ], "sources": [ { "title": "Rijksoverheid: Rijksbrede Quantumstrategie (PDF)", "url": "https://open.overheid.nl/documenten/e5ed8acc-e60c-49b0-bda9-fc32fd24b457/file", "retrieved": "2026-10-27", "locator": "Section 4.1.1, box PQC-migratie tijdpad voor de Nederlandse Rijksoverheid (end of 2026, 2030 and 2035)" }, { "title": "Rijksoverheid: news item of 5 October 2026 on the quantum strategy", "url": "https://www.rijksoverheid.nl/actueel/nieuws/2026/10/05/kabinet-nederland-in-2035-leidend-met-quantum-en-weerbaar-tegen-risicos", "retrieved": "2026-10-27", "locator": "Publication date 5 October 2026" } ], "type_label": "Roadmap or transition plan", "status_label": "Published", "display_date": "5 October 2026", "upcoming": false }, { "id": "eu-pqc-milestone-2026", "date": "2026-12-31", "date_text": "By 31 December 2026", "title": "EU roadmap milestone 1: first steps and national roadmaps", "institution": "NIS Cooperation Group (EU Member States)", "type": "deadline", "status": "target", "summary": "By the end of 2026 all Member States should have implemented at least the roadmap's first steps, established initial national transition roadmaps and started planning and pilots for high- and medium-risk use cases.", "links": { "standards": [ "eu-pqc-roadmap" ] }, "same_as": [ "legislation:eu-pqc-roadmap/eu-pqc-roadmap-next-2026" ], "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.1, timeline for the transition to PQC, point 1 (by 31.12.2026); section 4.2, box Milestone 1" }, { "title": "European Commission, Shaping Europe's digital future: Post-Quantum Cryptography (last update 20 October 2026)", "url": "https://digital-strategy.ec.europa.eu/en/policies/post-quantum-cryptography", "retrieved": "2026-10-21", "locator": "Policy page: all Member States should start transitioning by the end of 2026" } ], "type_label": "Deadline or target date", "status_label": "Target set by a published document", "display_date": "By 31 December 2026", "upcoming": true }, { "id": "eu-pqc-recommendation-review", "date": "2027-04-12", "date_text": "By 12 April 2027 at the latest", "title": "Assessment of the PQC Recommendation due", "institution": "European Commission with the Member States", "type": "deadline", "status": "target", "summary": "Member States should work with the Commission to assess the effects of Recommendation (EU) 2024/1101 at the latest three years after its publication, a review deadline that EUR-Lex records as 12 April 2027.", "links": { "standards": [ "eu-recommendation-2024-1101" ], "eu-law": [ "pqc-recommendation-2024-1101" ] }, "same_as": [ "legislation:eu-pqc-roadmap/eu-pqc-roadmap-next-2" ], "sources": [ { "title": "EUR-Lex: Commission Recommendation (EU) 2024/1101, document information and text", "url": "https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32024H1101", "retrieved": "2026-10-21", "locator": "Document information, dates: deadline 12/04/2027, review at the latest, see point 11; point (11) of the text" } ], "type_label": "Deadline or target date", "status_label": "Target set by a published document", "display_date": "By 12 April 2027 at the latest", "upcoming": true }, { "id": "eu-pqc-milestone-2030", "date": "2030-12-31", "date_text": "By 31 December 2030", "title": "EU roadmap milestone 2: high-risk use cases migrated", "institution": "NIS Cooperation Group (EU Member States)", "type": "deadline", "status": "target", "summary": "By the end of 2030 the roadmap's next steps should be implemented, high-risk use cases moved to post-quantum cryptography, planning and pilots for medium-risk use cases completed and quantum-safe software and firmware upgrades enabled by default.", "links": { "standards": [ "eu-pqc-roadmap" ] }, "same_as": [ "legislation:eu-pqc-roadmap/eu-pqc-roadmap-next-2030" ], "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.1, timeline for the transition to PQC, point 2 (by 31.12.2030); section 4.2, box Milestone 2" }, { "title": "European Commission, Shaping Europe's digital future: Post-Quantum Cryptography (last update 20 October 2026)", "url": "https://digital-strategy.ec.europa.eu/en/policies/post-quantum-cryptography", "retrieved": "2026-10-21", "locator": "Policy page: high-risk use cases no later than the end of 2030" } ], "type_label": "Deadline or target date", "status_label": "Target set by a published document", "display_date": "By 31 December 2030", "upcoming": true }, { "id": "eu-pqc-milestone-2035", "date": "2035-12-31", "date_text": "By 31 December 2035", "title": "EU roadmap milestone 3: medium-risk use cases migrated", "institution": "NIS Cooperation Group (EU Member States)", "type": "deadline", "status": "target", "summary": "By the end of 2035 the transition of medium-risk use cases should be completed, and that of low-risk use cases as far as feasible.", "links": { "standards": [ "eu-pqc-roadmap" ] }, "same_as": [ "legislation:eu-pqc-roadmap/eu-pqc-roadmap-next-2035" ], "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.1, timeline for the transition to PQC, point 3 (by 31.12.2035); section 4.2, point 3" } ], "type_label": "Deadline or target date", "status_label": "Target set by a published document", "display_date": "By 31 December 2035", "upcoming": true } ] }