{ "status": "source-verified", "compiled": "2026-10-27", "note": "A guide to post-quantum cryptography in the portal's own words, compiled from official pages and documents of EUR-Lex, the European Commission, the NIS Cooperation Group, ENISA, BSI, ANSSI, the AIVD, NIST, ETSI and the national agencies of the Member States on the date shown; each locator says where the fact was read. Dates are given only when a published text sets them, and an EU law is said to name post-quantum cryptography only if its text does. National records list only official agency or government pages; a page that could not be read is marked not verified with the reason. Not legal or compliance advice: check the publisher for the authoritative current version. Pending editorial review.", "disclaimer": "Not legal or compliance advice. Check the publisher for the authoritative, current version.", "upcoming_as_of": "2026-11-03", "audiences": { "public-administrations": "Public administrations", "essential-important-entities": "Operators of essential or important entities", "financial-entities": "Financial entities", "manufacturers": "Manufacturers of products with digital elements", "all-organisations": "All organisations" }, "joint_statements": [ { "id": "2024-11-27", "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Header: partners from 18 EU member states and the list of signing agencies, dated 27.11.2024" }, { "id": "2025-06-27", "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.06.2025)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement-2025.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Header: partners from 21 European states and the list of signing agencies, dated 27.06.2025" } ], "topics": [ { "id": "harvest-now-decrypt-later", "title": "Harvest now, decrypt later", "points": [ { "text": "An attacker can record encrypted traffic or stored data today and keep it until a quantum computer strong enough to break today's public-key cryptography exists. Data that must stay confidential for many years is therefore already exposed, although no such quantum computer is known to exist yet.", "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 1, Executive Summary, first paragraph; section 2, the first of two threat scenarios" }, { "title": "ENISA: Post-Quantum Cryptography, Current state and quantum mitigation (v2, May 2021)", "url": "https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Report%20-%20Post-Quantum%20Cryptography%20Current%20state%20and%20quantum%20mitigation-V2.pdf", "retrieved": "2026-10-21", "locator": "Section 1, Introduction: retrospective decryption of intercepted ciphertext" }, { "title": "ECCG: Agreed Cryptographic Mechanisms, version 2 (EUCC guidelines on cryptography, applicable version of 6 May 2025)", "url": "https://certification.enisa.europa.eu/document/download/a845662b-aee0-484e-9191-890c4cfa7aaa_en?filename=ECCG%20Agreed%20Cryptographic%20Mechanisms%20version%202.pdf", "retrieved": "2026-10-27", "locator": "Section 1.4, Post-Quantum Cryptography: harvest now, decrypt later, and early action for long-term confidentiality and long-lived products" } ] }, { "text": "The EU roadmap and the national agencies call this scenario store now, decrypt later and treat it as the main reason to act now. The roadmap counts a use case as high risk when data protected by public-key cryptography would still cause significant damage if decrypted ten years or more from now.", "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.2, point 2: definition of high-risk use cases" }, { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Page 1, two main threat scenarios; page 2, protection of the most sensitive use cases" } ] }, { "text": "A second concern is time. Moving complex systems such as public-key infrastructures, or devices with a long lifetime, can take many years, so a transition that starts late may not finish before such a quantum computer appears.", "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 2, the second threat scenario, long transition periods" }, { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Page 1, second threat scenario, long migration periods" } ] } ] }, { "id": "what-is-affected", "title": "What is affected, and what much less", "points": [ { "text": "A large quantum computer running Shor's algorithm would break the public-key methods in wide use today, such as RSA and elliptic-curve cryptography. Those methods do two jobs: key exchange, which agrees the keys that then encrypt a connection, and digital signatures, which show who signed and that nothing was changed.", "sources": [ { "title": "ENISA: Post-Quantum Cryptography, Current state and quantum mitigation (v2, May 2021)", "url": "https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Report%20-%20Post-Quantum%20Cryptography%20Current%20state%20and%20quantum%20mitigation-V2.pdf", "retrieved": "2026-10-21", "locator": "Section 1, Introduction, first paragraph: Shor breaks RSA, ECC and finite-field discrete logarithms" }, { "title": "BSI: Quantum Technologies and Quantum-Safe Cryptography", "url": "https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Quantentechnologien-und-Post-Quanten-Kryptografie/quantentechnologien-und-post-quanten-kryptografie_node.html", "retrieved": "2026-10-21", "locator": "Page text: public-key cryptography threatened, key agreement first, then long-lived signature keys" }, { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Page 1, first paragraph: RSA and ECC broken by Shor's algorithm on a fault-tolerant quantum computer" } ] }, { "text": "Symmetric encryption such as AES is affected much less: the known quantum attack, Grover's algorithm, roughly halves its security level, which longer keys such as AES-256 make up for. Quantum computers are not expected to speed up generic attacks on cryptographic hash functions by more than a square-root factor either.", "sources": [ { "title": "ENISA: Post-Quantum Cryptography, Current state and quantum mitigation (v2, May 2021)", "url": "https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Report%20-%20Post-Quantum%20Cryptography%20Current%20state%20and%20quantum%20mitigation-V2.pdf", "retrieved": "2026-10-21", "locator": "Section 1, Introduction, second paragraph on symmetric cryptography and Grover; section 2.3, Hash-based, on generic attacks against hash functions" }, { "title": "ANSSI: ANSSI views on the Post-Quantum Cryptography transition (2023 follow up), December 21, 2023", "url": "https://messervices.cyber.gouv.fr/documents-guides/follow_up_position_paper_on_post_quantum_cryptography.pdf", "retrieved": "2026-10-21", "locator": "Section 1.3, Symmetric cryptography: AES-256 and SHA2-384 levels as a conservative measure" } ] }, { "text": "NIST published the first replacement standards on 13 August 2024: FIPS 203 (ML-KEM) for key establishment, and FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) for digital signatures. The EU roadmap and the national agencies recommend combining post-quantum methods with today's methods, a hybrid approach, wherever feasible.", "sources": [ { "title": "NIST CSRC: FIPS 203 (Final)", "url": "https://csrc.nist.gov/pubs/fips/203/final", "retrieved": "2026-10-21", "locator": "Publication page: date August 13, 2024; abstract on ML-KEM for key establishment" }, { "title": "NIST CSRC: FIPS 204 (Final)", "url": "https://csrc.nist.gov/pubs/fips/204/final", "retrieved": "2026-10-21", "locator": "Publication page: date August 13, 2024; abstract on ML-DSA digital signatures" }, { "title": "NIST CSRC: FIPS 205 (Final)", "url": "https://csrc.nist.gov/pubs/fips/205/final", "retrieved": "2026-10-21", "locator": "Publication page: date August 13, 2024; abstract on SLH-DSA digital signatures" }, { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.1, standardised and tested hybrid solutions whenever feasible and suitable" }, { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Page 1: PQC in hybrid solutions for most use cases" }, { "title": "ANSSI: ANSSI views on the Post-Quantum Cryptography transition (2023 follow up), December 21, 2023", "url": "https://messervices.cyber.gouv.fr/documents-guides/follow_up_position_paper_on_post_quantum_cryptography.pdf", "retrieved": "2026-10-21", "locator": "Section 1.1, Hybridation, and section 1.2, Transition strategy" }, { "title": "ECCG: Agreed Cryptographic Mechanisms, version 2 (EUCC guidelines on cryptography, applicable version of 6 May 2025)", "url": "https://certification.enisa.europa.eu/document/download/a845662b-aee0-484e-9191-890c4cfa7aaa_en?filename=ECCG%20Agreed%20Cryptographic%20Mechanisms%20version%202.pdf", "retrieved": "2026-10-27", "locator": "Section 1.4, Post-Quantum Cryptography: post-quantum mechanisms rolled out in hybrid mode alongside classical ones, so that all combined mechanisms must be broken" } ] } ] }, { "id": "crypto-agility-and-inventories", "title": "Crypto-agility and inventories", "points": [ { "text": "The first step everywhere is an inventory: which systems, products and data use cryptography, for what purpose and under whose responsibility, including suppliers and software updates. ETSI makes inventory compilation the first of three migration stages, and the EU roadmap calls keeping cryptographic inventories a no-regret move for every entity.", "sources": [ { "title": "ETSI TR 103 619 V1.1.1 (2020-07): Migration strategies and recommendations to Quantum Safe schemes", "url": "https://www.etsi.org/deliver/etsi_tr/103600_103699/103619/01.01.01_60/tr_103619v010101p.pdf", "retrieved": "2026-10-21", "locator": "Clause 4, staged approach (inventory, migration plan, execution); clause 5.2, inventory compilation" }, { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 6.2, First Steps: support mature cryptographic asset management; include the supply chain" }, { "title": "ENISA: Post-Quantum Cryptography, Current state and quantum mitigation (v2, May 2021)", "url": "https://www.enisa.europa.eu/sites/default/files/publications/ENISA%20Report%20-%20Post-Quantum%20Cryptography%20Current%20state%20and%20quantum%20mitigation-V2.pdf", "retrieved": "2026-10-21", "locator": "Section 6, Quantum Mitigation: a catalogue of public-key use, including software updates and third-party products" } ] }, { "text": "Crypto-agility means building systems so that their cryptographic algorithms and parameters can be replaced without redesigning them. The EU roadmap asks that products expected to be used beyond 2030 can be upgraded to post-quantum cryptography and that software and firmware updates are signed with quantum-safe signatures.", "sources": [ { "title": "ETSI TR 103 619 V1.1.1 (2020-07): Migration strategies and recommendations to Quantum Safe schemes", "url": "https://www.etsi.org/deliver/etsi_tr/103600_103699/103619/01.01.01_60/tr_103619v010101p.pdf", "retrieved": "2026-10-21", "locator": "Clause 3.1, definition of crypto-agility" }, { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 3.2, definition of cryptographic agility; section 4.2, paragraph after the box Milestone 2, quantum-safe upgrade path" }, { "title": "BSI: Quantum Technologies and Quantum-Safe Cryptography", "url": "https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Quantentechnologien-und-Post-Quanten-Kryptografie/quantentechnologien-und-post-quanten-kryptografie_node.html", "retrieved": "2026-10-21", "locator": "Page text: crypto products should be made as flexible as possible (cryptographic agility)" }, { "title": "AIVD, CWI and TNO: The PQC Migration Handbook, revised and extended second edition, December 2024", "url": "https://english.aivd.nl/site/binaries/site-content/collections/documents/2024/12/3/the-pqc-migration-handbook/The+PQC+Migration+Handbook+.pdf", "retrieved": "2026-10-21", "locator": "Section 4.4, Cryptographic Agility, and sections 4.4.1 and 4.4.2" } ] }, { "text": "With the inventory in hand, an organisation can rank its systems by quantum risk, long-lived confidential data and hard-to-replace systems first, and plan the migration with its budget.", "sources": [ { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Page 2, the recommended steps: quantum threat analysis with an inventory, risk-oriented roadmap considering crypto-agility, migration plan with prioritisation and budget" }, { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 5, Estimating the quantum risk" }, { "title": "AIVD, CWI and TNO: The PQC Migration Handbook, revised and extended second edition, December 2024", "url": "https://english.aivd.nl/site/binaries/site-content/collections/documents/2024/12/3/the-pqc-migration-handbook/The+PQC+Migration+Handbook+.pdf", "retrieved": "2026-10-21", "locator": "Section 2.3, Cryptographic Asset Management, and section 2.4, Quantum Risk Assessment" } ] } ] } ], "actions": [ { "id": "nis2-cryptography-policies", "action": "Risk-management measures that include cryptography policies", "summary": "Member States had to apply their NIS2 rules from 18 October 2024, under which essential and important entities take risk-management measures that reflect the state of the art and include policies and procedures on the use of cryptography and, where appropriate, encryption.", "applies_to": "Essential and important entities under the national laws that transpose NIS2", "audiences": [ "essential-important-entities" ], "kind": "eu-law", "instrument": "Directive (EU) 2022/2555 (NIS2), Article 21(1) and (2), point (h), and Article 41(1)", "names_pqc": false, "date": "2024-10-18", "date_kind": "applies", "date_text": "18 October 2024 (national measures apply)", "links": { "eu-law": [ "nis2-directive" ] }, "sources": [ { "title": "EUR-Lex: Directive (EU) 2022/2555 (NIS2)", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555", "retrieved": "2026-10-21", "locator": "Article 21(1), second subparagraph (state of the art); Article 21(2), point (h); Article 41(1), second subparagraph" } ], "audience_labels": [ "Operators of essential or important entities" ], "kind_label": "EU regulation or directive", "date_kind_label": "Applies from", "upcoming": false }, { "id": "dora-ict-security-and-keys", "action": "ICT security policies, protected keys and encryption", "summary": "From 17 January 2025, financial entities must keep ICT security policies that protect the authenticity, integrity and confidentiality of data at rest, in use and in transit, protect cryptographic keys, encrypt data according to data classification and ICT risk assessment, and monitor relevant technological developments.", "applies_to": "Financial entities in scope of DORA", "audiences": [ "financial-entities" ], "kind": "eu-law", "instrument": "Regulation (EU) 2022/2554 (DORA), Articles 9(2), 9(4), point (d), 13(7) and 64", "names_pqc": false, "date": "2025-01-17", "date_kind": "applies", "date_text": "17 January 2025", "links": [], "sources": [ { "title": "EUR-Lex: Regulation (EU) 2022/2554 (DORA)", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022R2554", "retrieved": "2026-10-21", "locator": "Article 9(2); Article 9(4), point (d); Article 13(7); Article 64, second paragraph" } ], "audience_labels": [ "Financial entities" ], "kind_label": "EU regulation or directive", "date_kind_label": "Applies from", "upcoming": false }, { "id": "eu-roadmap-first-steps-2026", "action": "First steps and an initial national PQC roadmap", "summary": "By 31 December 2026 every Member State should have taken the roadmap's first steps, among them stakeholder involvement, cryptographic inventories, dependency maps and a quantum risk analysis, set up an initial national PQC transition roadmap and started planning and pilots for high- and medium-risk use cases.", "applies_to": "Member States (national governments and their administrations)", "audiences": [ "public-administrations" ], "kind": "eu-roadmap", "instrument": "NIS Cooperation Group, Coordinated Implementation Roadmap for the Transition to PQC, Part 1, version 1.1", "names_pqc": true, "date": "2026-12-31", "date_kind": "target", "date_text": "By 31 December 2026", "links": { "pqc-timeline": [ "eu-pqc-milestone-2026" ], "standards": [ "eu-pqc-roadmap" ] }, "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.1, timeline for the transition to PQC, point 1 (by 31.12.2026); section 4.2, box Milestone 1; section 6.2, First Steps" } ], "audience_labels": [ "Public administrations" ], "kind_label": "Coordinated EU roadmap of the Member States", "date_kind_label": "Target date", "upcoming": true }, { "id": "eu-recommendation-review-2027", "action": "Assess the effects of the PQC Recommendation", "summary": "Member States should assess the effects of Recommendation (EU) 2024/1101 together with the Commission at the latest three years after its publication, drawing on the work of the PQC sub-group, a deadline that EUR-Lex records as 12 April 2027.", "applies_to": "Member States, with the European Commission", "audiences": [ "public-administrations" ], "kind": "eu-recommendation", "instrument": "Commission Recommendation (EU) 2024/1101, point (11)", "names_pqc": true, "date": "2027-04-12", "date_kind": "review", "date_text": "By 12 April 2027 at the latest", "links": { "pqc-timeline": [ "eu-pqc-recommendation-review" ], "standards": [ "eu-recommendation-2024-1101" ], "eu-law": [ "pqc-recommendation-2024-1101" ] }, "sources": [ { "title": "EUR-Lex: Commission Recommendation (EU) 2024/1101, document information and text", "url": "https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX:32024H1101", "retrieved": "2026-10-21", "locator": "Document information, dates: deadline 12/04/2027, review at the latest, see point 11; point (11), Review" } ], "audience_labels": [ "Public administrations" ], "kind_label": "Commission recommendation", "date_kind_label": "Review date", "upcoming": true }, { "id": "cra-essential-requirements", "action": "Products designed to the essential cybersecurity requirements", "summary": "From 11 December 2027, manufacturers must ensure that products with digital elements they place on the market meet the essential requirements, which, where applicable on the basis of the risk assessment, include protecting the confidentiality of data, for example by encrypting relevant data at rest or in transit with state-of-the-art mechanisms, and protecting its integrity.", "applies_to": "Manufacturers placing products with digital elements on the EU market", "audiences": [ "manufacturers" ], "kind": "eu-law", "instrument": "Regulation (EU) 2024/2847 (Cyber Resilience Act), Article 13(1), Article 71(2) and Annex I, Part I, point (2)(e) and (f)", "names_pqc": false, "date": "2027-12-11", "date_kind": "applies", "date_text": "11 December 2027 (general date of application)", "links": [], "sources": [ { "title": "EUR-Lex: Regulation (EU) 2024/2847 (Cyber Resilience Act)", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32024R2847", "retrieved": "2026-10-21", "locator": "Article 13(1); Article 71(2), first subparagraph; Annex I, Part I, point (2), points (e) and (f)" } ], "audience_labels": [ "Manufacturers of products with digital elements" ], "kind_label": "EU regulation or directive", "date_kind_label": "Applies from", "upcoming": true }, { "id": "joint-statement-most-sensitive-2030", "action": "Protect the most sensitive use cases", "summary": "National agencies of 18 Member States, and later partners from 21 European states, recommend protecting the most sensitive use cases against store-now-decrypt-later attacks as soon as possible and by the end of 2030 at the latest, with detailed transition plans for public-key infrastructures in the same timeframe.", "applies_to": "Public administration, critical infrastructure providers, IT providers and all of industry, as the statement addresses them", "audiences": [ "all-organisations" ], "kind": "agency-statement", "instrument": "Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (27.11.2024, reissued 27.06.2025)", "names_pqc": true, "date": "2030-12-31", "date_kind": "target", "date_text": "By the end of 2030 at the latest", "links": { "pqc-timeline": [ "joint-statement-18-member-states" ] }, "sources": [ { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Page 1, addressees of the call to transition; page 2, paragraph on protecting the most sensitive use cases by the end of 2030" }, { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.06.2025)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement-2025.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Header: partners from 21 European states; same recommendation on page 2" } ], "audience_labels": [ "All organisations" ], "kind_label": "Joint statement of national agencies", "date_kind_label": "Target date", "upcoming": true }, { "id": "eu-roadmap-high-risk-2030", "action": "High-risk use cases moved to post-quantum cryptography", "summary": "By 31 December 2030 the roadmap's next steps should be taken, high-risk use cases moved to PQC and planning and pilots for medium-risk use cases completed; after 2030, quantum-vulnerable public-key mechanisms should not be used on their own for high-risk use cases.", "applies_to": "Member States; public administrations and other critical infrastructures, notably NIS2 entities, are asked to refer to the roadmap", "audiences": [ "public-administrations", "essential-important-entities" ], "kind": "eu-roadmap", "instrument": "NIS Cooperation Group, Coordinated Implementation Roadmap for the Transition to PQC, Part 1, version 1.1", "names_pqc": true, "date": "2030-12-31", "date_kind": "target", "date_text": "By 31 December 2030", "links": { "pqc-timeline": [ "eu-pqc-milestone-2030" ], "standards": [ "eu-pqc-roadmap" ] }, "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 3.1, Scope; section 4.1, paragraph on high-risk use cases after 2030 and timeline point 2 (by 31.12.2030); section 4.2, box Milestone 2" } ], "audience_labels": [ "Public administrations", "Operators of essential or important entities" ], "kind_label": "Coordinated EU roadmap of the Member States", "date_kind_label": "Target date", "upcoming": true }, { "id": "eu-roadmap-upgrade-path-2030", "action": "Quantum-safe upgrades enabled by default", "summary": "The roadmap sets the end of 2030 for quantum-safe software and firmware upgrades to be enabled by default, and highly recommends that products entering the market with an expected lifetime beyond 2030 can be upgraded to PQC, with post-quantum signatures protecting their update mechanism.", "applies_to": "Manufacturers of products with an expected lifetime beyond 2030, as the roadmap addresses them", "audiences": [ "manufacturers" ], "kind": "eu-roadmap", "instrument": "NIS Cooperation Group, Coordinated Implementation Roadmap for the Transition to PQC, Part 1, version 1.1", "names_pqc": true, "date": "2030-12-31", "date_kind": "target", "date_text": "By 31 December 2030", "links": { "pqc-timeline": [ "eu-pqc-milestone-2030" ], "standards": [ "eu-pqc-roadmap" ] }, "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.1, timeline point 2, upgrades enabled by default; section 4.2, paragraph after the box Milestone 2, quantum-safe upgrade path; section 6.3, Next Steps, cryptographic agility" } ], "audience_labels": [ "Manufacturers of products with digital elements" ], "kind_label": "Coordinated EU roadmap of the Member States", "date_kind_label": "Target date", "upcoming": true }, { "id": "eu-roadmap-medium-risk-2035", "action": "Medium-risk use cases moved to post-quantum cryptography", "summary": "By 31 December 2035 the transition of medium-risk use cases should be completed, and quantum-vulnerable public-key mechanisms should no longer be used on their own for them.", "applies_to": "Member States; public administrations and other critical infrastructures, notably NIS2 entities, are asked to refer to the roadmap", "audiences": [ "public-administrations", "essential-important-entities" ], "kind": "eu-roadmap", "instrument": "NIS Cooperation Group, Coordinated Implementation Roadmap for the Transition to PQC, Part 1, version 1.1", "names_pqc": true, "date": "2035-12-31", "date_kind": "target", "date_text": "By 31 December 2035", "links": { "pqc-timeline": [ "eu-pqc-milestone-2035" ], "standards": [ "eu-pqc-roadmap" ] }, "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.1, paragraph on medium-risk use cases after 2035 and timeline point 3 (by 31.12.2035); section 4.2, point 3" } ], "audience_labels": [ "Public administrations", "Operators of essential or important entities" ], "kind_label": "Coordinated EU roadmap of the Member States", "date_kind_label": "Target date", "upcoming": true }, { "id": "eu-roadmap-low-risk-2035", "action": "Low-risk use cases moved as far as feasible", "summary": "By 31 December 2035 the transition of low-risk use cases should also be completed, as far as feasible.", "applies_to": "Member States; public administrations and other critical infrastructures, notably NIS2 entities, are asked to refer to the roadmap", "audiences": [ "public-administrations", "essential-important-entities" ], "kind": "eu-roadmap", "instrument": "NIS Cooperation Group, Coordinated Implementation Roadmap for the Transition to PQC, Part 1, version 1.1", "names_pqc": true, "date": "2035-12-31", "date_kind": "target", "date_text": "By 31 December 2035, as far as feasible", "links": { "pqc-timeline": [ "eu-pqc-milestone-2035" ], "standards": [ "eu-pqc-roadmap" ] }, "sources": [ { "title": "NIS Cooperation Group: A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography, Part 1, version 1.1", "url": "https://ec.europa.eu/newsroom/dae/redirection/document/117507", "retrieved": "2026-10-21", "locator": "Section 4.1, timeline point 3, second item; section 4.2, point 3" } ], "audience_labels": [ "Public administrations", "Operators of essential or important entities" ], "kind_label": "Coordinated EU roadmap of the Member States", "date_kind_label": "Target date", "upcoming": true }, { "id": "joint-statement-start-now", "action": "Start the transition now", "summary": "Organisations and governments should start now: analyse the quantum threat with an inventory of the assets to protect and the applications that use cryptography, draw up a risk-based roadmap that considers crypto-agility, and plan, prioritise and budget the migration.", "applies_to": "Public administration, critical infrastructure providers, IT providers and all of industry, as the statement addresses them", "audiences": [ "all-organisations" ], "kind": "agency-statement", "instrument": "Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (27.11.2024, reissued 27.06.2025)", "names_pqc": true, "date": null, "date_kind": "none", "date_text": "Start now; no date set", "links": { "pqc-timeline": [ "joint-statement-18-member-states" ] }, "sources": [ { "title": "BSI: Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography (joint statement, 27.11.2024)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statement.pdf?__blob=publicationFile", "retrieved": "2026-10-21", "locator": "Page 1, last paragraph, and page 2, the four recommended steps" } ], "audience_labels": [ "All organisations" ], "kind_label": "Joint statement of national agencies", "date_kind_label": "No date in the text", "upcoming": false }, { "id": "nis2-procurement-encryption", "action": "National policies on encryption in public procurement", "summary": "As part of its national cybersecurity strategy, each Member State must adopt policies on cybersecurity requirements for ICT products and services in public procurement, including requirements on encryption.", "applies_to": "Member States, in their national cybersecurity strategy", "audiences": [ "public-administrations" ], "kind": "eu-law", "instrument": "Directive (EU) 2022/2555 (NIS2), Article 7(2), point (b)", "names_pqc": false, "date": null, "date_kind": "none", "date_text": "No date in this provision", "links": { "eu-law": [ "nis2-directive" ] }, "sources": [ { "title": "EUR-Lex: Directive (EU) 2022/2555 (NIS2)", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555", "retrieved": "2026-10-21", "locator": "Article 7, National cybersecurity strategy, paragraph 2, point (b)" } ], "audience_labels": [ "Public administrations" ], "kind_label": "EU regulation or directive", "date_kind_label": "No date in the text", "upcoming": false }, { "id": "nis2-implementing-cryptography-policy", "action": "A cryptography policy with approved algorithms, reviewed against the state of the art", "summary": "Digital infrastructure and digital service providers named in the regulation, such as cloud, data centre, managed security and trust service providers, must set a cryptography policy that fixes approved protocols, algorithms and cipher strength, following a cryptographic agility approach where appropriate, and review it at planned intervals in the light of the state of the art.", "applies_to": "DNS, TLD, cloud, data centre, content delivery, managed and managed security service providers, online marketplaces, search engines, social networks and trust service providers under NIS2", "audiences": [ "essential-important-entities" ], "kind": "eu-implementing-act", "instrument": "Commission Implementing Regulation (EU) 2024/2690, Article 1 and Annex, points 9.1 to 9.3", "names_pqc": false, "date": null, "date_kind": "none", "date_text": "No date in these provisions", "links": { "eu-law": [ "nis2-directive" ] }, "sources": [ { "title": "EUR-Lex: Commission Implementing Regulation (EU) 2024/2690", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32024R2690", "retrieved": "2026-10-21", "locator": "Article 1, Subject matter; Annex, point 9 Cryptography, points 9.1, 9.2(b) and 9.3" } ], "audience_labels": [ "Operators of essential or important entities" ], "kind_label": "Commission delegated or implementing regulation", "date_kind_label": "No date in the text", "upcoming": false }, { "id": "dora-rts-cryptographic-controls", "action": "An encryption policy that keeps up with cryptanalysis", "summary": "Financial entities under the full ICT risk-management framework must have a policy on encryption and cryptographic controls that sets criteria for choosing techniques in line with leading practices and standards and provides for updating or changing the cryptographic technology as cryptanalysis develops, with mitigation and monitoring where that is not possible.", "applies_to": "Financial entities covered by Title II of Delegated Regulation (EU) 2024/1774", "audiences": [ "financial-entities" ], "kind": "eu-implementing-act", "instrument": "Commission Delegated Regulation (EU) 2024/1774 (DORA ICT risk-management standards), Article 6", "names_pqc": false, "date": null, "date_kind": "none", "date_text": "No date in this provision", "links": [], "sources": [ { "title": "EUR-Lex: Commission Delegated Regulation (EU) 2024/1774", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32024R1774", "retrieved": "2026-10-21", "locator": "Recital (48); Title II, Section 4, Article 6(1) to (5), Encryption and cryptographic controls" } ], "audience_labels": [ "Financial entities" ], "kind_label": "Commission delegated or implementing regulation", "date_kind_label": "No date in the text", "upcoming": false }, { "id": "eidas-trust-services-cryptography", "action": "Suitable cryptographic techniques for qualified trust services", "summary": "Qualified trust service providers must use trustworthy systems and products, including suitable cryptographic techniques, while the recitals ask trust service providers to follow current best practice in cryptography and want the European Digital Identity Wallets that Member States provide to use state-of-the-art encryption.", "applies_to": "Qualified trust service providers; Member States providing European Digital Identity Wallets (recitals)", "audiences": [ "essential-important-entities", "public-administrations" ], "kind": "eu-law", "instrument": "Regulation (EU) 2024/1183 (eIDAS 2), Article 1, point (21), amending Article 24(2), point (e), of Regulation (EU) No 910/2014; recitals 31, 73 and 79", "names_pqc": false, "date": null, "date_kind": "none", "date_text": "No date in these provisions", "links": [], "sources": [ { "title": "EUR-Lex: Regulation (EU) 2024/1183 (eIDAS 2)", "url": "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32024R1183", "retrieved": "2026-10-21", "locator": "Article 1, point (21)(b)(ii), new Article 24(2), point (e); recitals (31), (73) and (79)" } ], "audience_labels": [ "Public administrations", "Operators of essential or important entities" ], "kind_label": "EU regulation or directive", "date_kind_label": "No date in the text", "upcoming": false } ], "countries": [ { "code": "AT", "agency": { "name": "Federal Chancellery of Austria (Bundeskanzleramt)", "url": "https://www.bundeskanzleramt.gv.at/" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No national PQC guidance or roadmap was found on the Federal Chancellery pages. The Interior Ministry site hosts a sector analysis of PQC migration for electronic travel documents (status 7 May 2025), prepared with A-SIT Plus, which is not a national roadmap. The A-SIT site could not be loaded (connection failed).", "checked_pages": [ "https://www.bundeskanzleramt.gv.at/", "https://www.bmi.gv.at/607/files/pqc_emrtd_-_analysebericht_v1.2.1-sig_signed.pdf", "https://www.a-sit.at/" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Austria", "status_label": "None found on official pages" }, { "code": "BE", "agency": { "name": "Centre for Cybersecurity Belgium (CCB)", "url": "https://ccb.belgium.be/" }, "status": "published", "documents": [ { "title": "Communication of the BIPT Council of 13/01/2026 on minimum requirements and a roadmap for the post-quantum transition in the telecommunications sector", "publisher": "Belgian Institute for Postal Services and Telecommunications (BIPT)", "date": "2026-01-13", "date_text": "13 January 2026", "url": "https://www.bipt.be/file/cc73d96153bbd5448a56f19d925d05b1379c7f21/cdef941ef2d30259b04291d4d705a2c9f747e422/communication-minimum-requirements-roadmap-post-quantum-transition-telecommunications-sector.pdf", "retrieved": "2026-10-21", "locator": "Executive summary; section 4, Timeline, points 44 and 45 (deadlines 2027, 2028 and 2030)" } ], "checked": "2026-10-21", "note": "The telecommunications regulator BIPT sets minimum requirements and a sector roadmap: inventory and risk analysis by 2027, planning by 2028 and implementation by 2030. The CCB site answered with an access denied page (HTTP 403), so CCB pages could not be checked.", "checked_pages": [ "https://ccb.belgium.be/", "https://bipt.be/operators/publication/communication-of-13-january-2026-on-minimum-requirements-and-roadmap-for-the-post-quantum-transition-in-the-telecommunications-sector" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Belgium", "status_label": "National guidance or roadmap found" }, { "code": "BG", "agency": { "name": "CERT Bulgaria (national computer security incident response team)", "url": "https://www.govcert.bg/" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No PQC guidance was found on the CERT Bulgaria site, whose searches for quantum terms returned nothing. The Ministry of e-Government site could not be loaded (connection failed).", "checked_pages": [ "https://www.govcert.bg/", "https://e-gov.bg/" ], "joint_statements": [], "milestones": [ "eu-pqc-milestone-2026" ], "name": "Bulgaria", "status_label": "None found on official pages" }, { "code": "HR", "agency": { "name": "National Cyber Security Centre (NCSC-HR)", "url": "https://ncsc.hr/" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No PQC guidance was found on the NCSC-HR documents, guidelines and recommendations pages or on the site of the Information Systems Security Bureau (ZSIS), whose search for quantum terms returned nothing.", "checked_pages": [ "https://ncsc.hr/hr/dokumenti", "https://ncsc.hr/hr/smjernice-i-upute", "https://ncsc.hr/hr/preporuke", "https://www.zsis.hr/" ], "joint_statements": [], "milestones": [ "eu-pqc-milestone-2026" ], "name": "Croatia", "status_label": "None found on official pages" }, { "code": "CY", "agency": { "name": "Digital Security Authority (DSA)", "url": "https://dsa.cy/" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No PQC guidance was found on the Digital Security Authority site; its search for quantum terms only returned a news item on an ENISA forum.", "checked_pages": [ "https://dsa.cy/", "https://dsa.cy/category/news/enisa-telco-forum" ], "joint_statements": [], "milestones": [ "eu-pqc-milestone-2026" ], "name": "Cyprus", "status_label": "None found on official pages" }, { "code": "CZ", "agency": { "name": "National Cyber and Information Security Agency (NÚKIB)", "url": "https://nukib.gov.cz/" }, "status": "published", "documents": [ { "title": "Minimální požadavky na kryptografické algoritmy: Doporučení v oblasti kryptografické bezpečnosti, verze 4.1", "publisher": "National Cyber and Information Security Agency (NÚKIB)", "date": "2026-03-04", "date_text": "4 March 2026 (version 4.1)", "url": "https://portal.nukib.gov.cz/storage/uploads/2026/03/04/doporuceni-kryptograficka-bezpecnost-v4-1_uid_69a8216e3deb1.pdf", "retrieved": "2026-10-21", "locator": "Cover and header: 4 March 2026, version 4.1; chapter 4, quantum-resistant asymmetric algorithms (post-quantum cryptography)" } ], "checked": "2026-10-21", "note": "NÚKIB recommendations on cryptographic algorithms have a chapter on quantum-resistant asymmetric algorithms, with ML-KEM, hybrid key establishment and post-quantum signatures.", "checked_pages": [ "https://nukib.gov.cz/", "https://portal.nukib.gov.cz/informacni-servis/podpurne-materialy" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Czechia", "status_label": "National guidance or roadmap found" }, { "code": "DK", "agency": { "name": "Styrelsen for Samfundssikkerhed (SAMSIK)", "url": "https://samsik.dk/" }, "status": "published", "documents": [ { "title": "Overgangen til kvantesikker kryptografi", "publisher": "Styrelsen for Samfundssikkerhed (SAMSIK)", "date": "2023-03-21", "date_text": "21 March 2023", "url": "https://samsik.dk/cybersikkerhed/temaer/overgangen-til-kvantesikker-kryptografi/", "retrieved": "2026-10-21", "locator": "Web page: date 21 March 2023; sections on inventory, risk, hybrid algorithms and crypto-agility" } ], "checked": "2026-10-21", "note": "The former Centre for Cyber Security site now redirects to SAMSIK. Its page on the transition advises an inventory, risk assessment, hybrid algorithms for highly sensitive data and crypto-agility, without a national deadline.", "checked_pages": [ "https://www.cfcs.dk/", "https://samsik.dk/cybersikkerhed/temaer/overgangen-til-kvantesikker-kryptografi/" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Denmark", "status_label": "National guidance or roadmap found" }, { "code": "EE", "agency": { "name": "Information System Authority (Riigi Infosüsteemi Amet, RIA)", "url": "https://www.ria.ee/" }, "status": "not-verified", "documents": [], "checked": "2026-10-27", "note": "The RIA site and the related id.ee portal answered with a bot challenge (HTTP 403), which was not bypassed, so their pages could not be read. Search results point to RIA reports on cryptographic algorithms and to a national PQC roadmap presented in 2026, none of which could be confirmed. Retried on 27 October 2026 with a plain request: still a bot challenge (HTTP 403 or a browser verification redirect), not bypassed. Next attempt: an editor in an ordinary browser at the next 30-day review, by 26 November 2026.", "checked_pages": [ "https://www.ria.ee/", "https://www.id.ee/" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Estonia", "status_label": "Not verified" }, { "code": "FI", "agency": { "name": "Finnish Transport and Communications Agency, National Cyber Security Centre (Traficom NCSC-FI)", "url": "https://www.kyberturvallisuuskeskus.fi/fi" }, "status": "published", "documents": [ { "title": "Kvanttiturvalliset algoritmit ja niihin siirtyminen (Traficom/7141/09.04.01/2024)", "publisher": "Finnish Transport and Communications Agency (Traficom)", "date": "2024-06-12", "date_text": "12 June 2024", "url": "https://www.kyberturvallisuuskeskus.fi/sites/default/files/media/file/Ohje%20kvanttiturvallisiin%20algoritmeihin%20siirtymisest%C3%A4.pdf", "retrieved": "2026-10-21", "locator": "Memo header dated 12.6.2024; section 1, PQC standardisation and national criteria; section 2, preparing the transition" } ], "checked": "2026-10-21", "note": "A Traficom memo says the NIST post-quantum algorithms will join the national crypto criteria, recommends hybrid use and crypto-agility, and asks organisations to prepare a migration plan with an inventory and a risk assessment, without a national deadline.", "checked_pages": [ "https://www.kyberturvallisuuskeskus.fi/fi", "https://www.kyberturvallisuuskeskus.fi/fi/uutiset/post-quantum-crypto-aikaan-valmistautuminen-kaynnissa-myos-suomessa" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Finland", "status_label": "National guidance or roadmap found" }, { "code": "FR", "agency": { "name": "National Cybersecurity Agency of France (ANSSI)", "url": "https://cyber.gouv.fr/" }, "status": "published", "documents": [ { "title": "ANSSI views on the Post-Quantum Cryptography transition (2023 follow up)", "publisher": "ANSSI", "date": "2023-12-21", "date_text": "21 December 2023", "url": "https://messervices.cyber.gouv.fr/documents-guides/follow_up_position_paper_on_post_quantum_cryptography.pdf", "retrieved": "2026-10-21", "locator": "Header dated December 21, 2023; sections 1.1 Hybridation, 1.2 Transition strategy and 3 Hybridation modes" }, { "title": "Règles et recommandations concernant le choix et le dimensionnement des mécanismes cryptographiques (ANSSI-PG-083)", "publisher": "ANSSI", "date": "2026-03-20", "date_text": "20 March 2026", "url": "https://messervices.cyber.gouv.fr/guides/mecanismes-cryptographiques", "retrieved": "2026-10-21", "locator": "Guide page: published 20 March 2026" } ], "checked": "2026-10-21", "note": "The cyber.gouv.fr site answered with a CAPTCHA, which was not solved; the documents were read on ANSSI's own service platform. ANSSI considers hybridation necessary wherever post-quantum protection is needed and recommends hybrid post-quantum protection for products meant to protect information beyond 2030.", "checked_pages": [ "https://cyber.gouv.fr/", "https://messervices.cyber.gouv.fr/guides/en-follow-position-paper-post-quantum-cryptography", "https://messervices.cyber.gouv.fr/guides/mecanismes-cryptographiques" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "France", "status_label": "National guidance or roadmap found" }, { "code": "DE", "agency": { "name": "Federal Office for Information Security (BSI)", "url": "https://www.bsi.bund.de/" }, "status": "published", "documents": [ { "title": "Nationale Umsetzung der EU-Roadmap zur Umstellung auf Post-Quanten-Kryptografie", "publisher": "BMDS, BMI and BSI", "date": "2026-09-11", "date_text": "11 September 2026 (document date; the BSI download page is dated 12 October 2026)", "url": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Krypto/Leitlinie-Umstellung-PQC.html", "retrieved": "2026-10-21", "locator": "Download page: title, joint guideline of BMDS, BMI and BSI, date 12.10.2026" } ], "checked": "2026-10-21", "note": "A joint guideline of the federal ministries BMDS and BMI and the BSI sets a German timeline aligned with the EU roadmap; BSI also publishes technical guideline TR-02102-1 and its page on quantum-safe cryptography.", "checked_pages": [ "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Krypto/Leitlinie-Umstellung-PQC.html", "https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Quantentechnologien-und-Post-Quanten-Kryptografie/quantentechnologien-und-post-quanten-kryptografie_node.html" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026", "germany-national-pqc-guideline" ], "name": "Germany", "status_label": "National guidance or roadmap found" }, { "code": "GR", "agency": { "name": "National Cyber Security Authority (Εθνική Αρχή Κυβερνοασφάλειας)", "url": "https://cyber.gov.gr/" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No PQC guidance or roadmap was found. The National Cybersecurity Strategy 2026 to 2030 discusses the quantum threat and the importance of the PQC transition without phases, dates or technical recommendations.", "checked_pages": [ "https://cyber.gov.gr/", "https://cyber.gov.gr/wp-content/uploads/2025/12/%CE%95%CE%A3%CE%9A-2026-2030.pdf" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Greece", "status_label": "None found on official pages" }, { "code": "HU", "agency": { "name": "National Cyber Security Institute (Nemzeti Kibervédelmi Intézet, NKI)", "url": "https://nki.gov.hu/" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No PQC guidance was found; a 2024 overview report on cryptography only mentions that a hybrid approach will be needed, and site searches returned news items.", "checked_pages": [ "https://nki.gov.hu/", "https://nki.gov.hu/wp-content/uploads/2024/10/A-kriptografia-napjainkban.pdf" ], "joint_statements": [ "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Hungary", "status_label": "None found on official pages" }, { "code": "IE", "agency": { "name": "National Cyber Security Centre (NCSC)", "url": "https://www.ncsc.gov.ie/" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No PQC guidance was found in the NCSC guidance list; its research and innovation priorities of November 2025 pose research questions on a national migration to quantum-resistant cryptography.", "checked_pages": [ "https://www.ncsc.gov.ie/guidance/", "https://www.ncsc.gov.ie/pdfs/NCSC_Research_Innovation_Priorities_V1.1.pdf" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Ireland", "status_label": "None found on official pages" }, { "code": "IT", "agency": { "name": "National Cybersecurity Agency (Agenzia per la Cybersicurezza Nazionale, ACN)", "url": "https://www.acn.gov.it/portale/home" }, "status": "published", "documents": [ { "title": "Crittografia Post-Quantum e Quantistica: Preparazione alla Minaccia Quantistica", "publisher": "Agenzia per la Cybersicurezza Nazionale (ACN)", "date": "2024-07-11", "date_text": "July 2024 (version 1.0 of 11 July 2024)", "url": "https://www.acn.gov.it/portale/documents/20119/85999/ACN_Crittografia_Quantum_Safe.pdf/d7eb595c-ee7f-848b-6c14-abf64cafb310?t=1721310015826", "retrieved": "2026-10-21", "locator": "Cover: July 2024; version table 1.0, 11/07/2024; section 3.3 on hybrid PQC" } ], "checked": "2026-10-21", "note": "ACN publishes an introduction to post-quantum and quantum cryptography and cryptographic guidelines; its cryptography page lists them. No national transition roadmap was found.", "checked_pages": [ "https://www.acn.gov.it/portale/crittografia/linee-guida-funzioni-crittografiche" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Italy", "status_label": "National guidance or roadmap found" }, { "code": "LV", "agency": { "name": "National Cyber Security Centre of Latvia (Nacionālais kiberdrošības centrs, Ministry of Defence)", "url": "https://www.cyber.gov.lv/lv" }, "status": "published", "documents": [ { "title": "Kriptogrāfijas vadlīnijas, versija 1.0", "publisher": "Nacionālais kiberdrošības centrs", "date": "2025-09-12", "date_text": "12 September 2025 (version 1.0)", "url": "https://www.cyber.gov.lv/sites/cyber/files/document/20250912-Kriptografijas-vadlinijas.pdf", "retrieved": "2026-10-21", "locator": "Cover: version 1.0, 12.09.2025; section 4.4, asymmetric cryptography, item on preparing for post-quantum cryptography" } ], "checked": "2026-10-21", "note": "The national cryptography guidelines include a short recommendation to prepare for post-quantum cryptography with hybrid classical and post-quantum algorithms, without phases or dates.", "checked_pages": [ "https://www.cyber.gov.lv/lv", "https://cert.lv/lv/" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Latvia", "status_label": "National guidance or roadmap found" }, { "code": "LT", "agency": { "name": "National Cyber Security Centre (Nacionalinis kibernetinio saugumo centras, NKSC)", "url": "https://www.nksc.lt/" }, "status": "not-verified", "documents": [], "checked": "2026-10-27", "note": "The NKSC site and the Ministry of National Defence document answered with a bot challenge (HTTP 403), which was not bypassed, so they could not be read. Search results point to NKSC guidelines on the transition to post-quantum cryptography, which could not be confirmed. Retried on 27 October 2026 with a plain request: still a bot challenge (HTTP 403 or a browser verification redirect), not bypassed. Next attempt: an editor in an ordinary browser at the next 30-day review, by 26 November 2026.", "checked_pages": [ "https://www.nksc.lt/", "https://www.nksc.lt/doc/biuleteniai/Perejimo_prie_PQC_gaires.pdf" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Lithuania", "status_label": "Not verified" }, { "code": "LU", "agency": { "name": "High Commission for National Protection (HCPN)", "url": "https://hcpn.gouvernement.lu/fr.html" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No agency PQC guidance was found on the HCPN or GOVCERT.LU pages. The government quantum strategy presented in May 2025 plans, in its action 10, a future national PQC roadmap, cryptographic inventories and migration guidelines, without dates.", "checked_pages": [ "https://hcpn.gouvernement.lu/fr.html", "https://govcert.lu/", "https://gouvernement.lu/fr/publications/rapport-etude-analyse/minist-digitalisation/2025-luxembourg-quantum-strategy-en.html" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Luxembourg", "status_label": "None found on official pages" }, { "code": "MT", "agency": { "name": "Government of Malta (competent cybersecurity body not confirmed)", "url": "https://www.gov.mt/" }, "status": "not-verified", "documents": [], "checked": "2026-10-27", "note": "Every gov.mt site tried answered with a bot challenge (HTTP 403), which was not bypassed, so neither the competent body nor any PQC guidance could be checked. Retried on 27 October 2026 with a plain request: still a bot challenge (HTTP 403 or a browser verification redirect), not bypassed. Next attempt: an editor in an ordinary browser at the next 30-day review, by 26 November 2026.", "checked_pages": [ "https://www.gov.mt/", "https://mita.gov.mt/", "https://cirt.gov.mt/" ], "joint_statements": [], "milestones": [ "eu-pqc-milestone-2026" ], "name": "Malta", "status_label": "Not verified" }, { "code": "NL", "agency": { "name": "National Cyber Security Centre (NCSC) and the Netherlands National Communications Security Agency within the AIVD", "url": "https://www.ncsc.nl/" }, "status": "published", "documents": [ { "title": "Rijksbrede Quantumstrategie", "publisher": "Government of the Netherlands (Ministry of Economic Affairs and Climate with other ministries)", "date": "2026", "date_text": "2026 (no publication day printed in the document)", "url": "https://open.overheid.nl/documenten/e5ed8acc-e60c-49b0-bda9-fc32fd24b457/file", "retrieved": "2026-10-21", "locator": "Section 4.1.1, box PQC-migratie tijdpad voor de Nederlandse Rijksoverheid" }, { "title": "The PQC Migration Handbook, revised and extended second edition", "publisher": "AIVD, CWI and TNO", "date": "2024-12", "date_text": "December 2024", "url": "https://english.aivd.nl/documents/2024/12/3/the-pqc-migration-handbook", "retrieved": "2026-10-21", "locator": "AIVD document page dated 29-11-2024; handbook cover December 2024; sections 2.3, 2.4, 3.2 and 4.4" } ], "checked": "2026-10-21", "note": "The government-wide quantum strategy sets a PQC migration timeline for central government, from risk management by the end of 2026 to high-risk use cases by the end of 2030 and medium-risk ones by the end of 2035. The NCSC site showed a temporary unavailability notice, so its pages could not be read.", "checked_pages": [ "https://www.ncsc.nl/", "https://english.aivd.nl/documents/2024/12/3/the-pqc-migration-handbook" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Netherlands", "status_label": "National guidance or roadmap found" }, { "code": "PL", "agency": { "name": "NASK National Research Institute (CERT Polska)", "url": "https://cert.pl/" }, "status": "none-found", "documents": [], "checked": "2026-10-21", "note": "No published PQC guidance or migration plan was found. The national cybersecurity strategy of March 2026 names migration to post-quantum cryptography as an objective, and the government plenipotentiary reports that work on a migration plan has started.", "checked_pages": [ "https://cert.pl/", "https://www.nask.pl/", "https://eli.gov.pl/api/acts/MP/2026/309/text.pdf" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Poland", "status_label": "None found on official pages" }, { "code": "PT", "agency": { "name": "National Cybersecurity Centre (Centro Nacional de Cibersegurança, CNCS)", "url": "https://www.cncs.gov.pt/" }, "status": "not-verified", "documents": [], "checked": "2026-10-27", "note": "Every CNCS page answered with a browser verification challenge, which was not bypassed, so the site could not be read. Retried on 27 October 2026 with a plain request: still a bot challenge (HTTP 403 or a browser verification redirect), not bypassed. Next attempt: an editor in an ordinary browser at the next 30-day review, by 26 November 2026.", "checked_pages": [ "https://www.cncs.gov.pt/" ], "joint_statements": [ "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Portugal", "status_label": "Not verified" }, { "code": "RO", "agency": { "name": "National Cyber Security Directorate (Directoratul Național de Securitate Cibernetică, DNSC)", "url": "https://www.dnsc.ro/" }, "status": "not-verified", "documents": [], "checked": "2026-10-27", "note": "The DNSC site answered with a bot challenge (HTTP 403), which was not bypassed, so it could not be read. Search results point to a DNSC guide on the transition to post-quantum cryptography, which could not be confirmed. Retried on 27 October 2026 with a plain request: still a bot challenge (HTTP 403 or a browser verification redirect), not bypassed. Next attempt: an editor in an ordinary browser at the next 30-day review, by 26 November 2026.", "checked_pages": [ "https://www.dnsc.ro/", "https://www.dnsc.ro/doc/ghid?page=2" ], "joint_statements": [], "milestones": [ "eu-pqc-milestone-2026" ], "name": "Romania", "status_label": "Not verified" }, { "code": "SK", "agency": { "name": "National Security Authority (Národný bezpečnostný úrad, NBÚ)", "url": "https://www.nbu.gov.sk/" }, "status": "published", "documents": [ { "title": "Odporúčania pre kryptografické algoritmy, verzia 1.0", "publisher": "National Security Authority (NBÚ), as host of the document", "date": "2025-10-08", "date_text": "Valid from 8 October 2025 (version 1.0)", "url": "https://www.nbu.gov.sk/data/att/3483.pdf", "retrieved": "2026-10-21", "locator": "Header: version 1.0, valid from 08.10.2025; section on asymmetric algorithms, post-quantum algorithms" } ], "checked": "2026-10-21", "note": "Recommendations for cryptographic algorithms hosted by NBÚ include post-quantum key establishment, hybrid key exchange and post-quantum signatures, without phases or dates; the document does not name its publisher.", "checked_pages": [ "https://www.nbu.gov.sk/", "https://www.csirt.gov.sk/" ], "joint_statements": [], "milestones": [ "eu-pqc-milestone-2026" ], "name": "Slovakia", "status_label": "National guidance or roadmap found" }, { "code": "SI", "agency": { "name": "Government Information Security Office (Urad Vlade RS za informacijsko varnost, URSIV)", "url": "https://www.gov.si/drzavni-organi/vladne-sluzbe/urad-vlade-za-informacijsko-varnost/" }, "status": "published", "documents": [ { "title": "Varna digitalna prihodnost v dobi kvantnih računalnikov: Prehod v post-kvantno kriptografijo (PQC)", "publisher": "Urad Vlade RS za informacijsko varnost (URSIV)", "date": "2026-04", "date_text": "April 2026", "url": "https://www.gov.si/assets/vladne-sluzbe/URSIV/Datoteke/Dokumenti/Varna-digitalna-prihodnost-v-dobi-kvantnih-racunalnikov.pdf", "retrieved": "2026-10-21", "locator": "Cover: April 2026; passage on the three EU milestones of 31.12.2026, 31.12.2030 and 31.12.2035" } ], "checked": "2026-10-21", "note": "URSIV guidance on the transition to post-quantum cryptography restates the EU milestones of 2026, 2030 and 2035 and covers hybrid schemes and a cryptographic inventory.", "checked_pages": [ "https://www.gov.si/novice/2026-04-20-objavljeno-gradivo-o-prehodu-v-post-kvantno-kriptografijo/" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Slovenia", "status_label": "National guidance or roadmap found" }, { "code": "ES", "agency": { "name": "National Cryptologic Centre (Centro Criptológico Nacional, CCN)", "url": "https://www.ccn.cni.es/es/" }, "status": "published", "documents": [ { "title": "CCN-TEC 009 BP/37: Recomendaciones para una transición postcuántica segura", "publisher": "Centro Criptológico Nacional (CCN)", "date": "2026-07", "date_text": "July 2026", "url": "https://www.ccn.cni.es/eu/docman/documentos-publicos/boletines-pytec/495-ccn-tec-009-recomendaciones-transicion-postcuantica-segura/file", "retrieved": "2026-10-21", "locator": "Cover and edition date: July 2026; section 4, CCN recommendations; section 4.8, recommended calendar" } ], "checked": "2026-10-21", "note": "The CCN good-practice guide sets a recommended calendar in five phases aligned with the EU roadmap, with high-risk use cases completed by December 2030 and medium-risk ones by December 2035.", "checked_pages": [ "https://www.ccn.cni.es/es/", "https://www.ccn-cert.cni.es/" ], "joint_statements": [ "2024-11-27", "2025-06-27" ], "milestones": [ "joint-statement-18-member-states", "eu-pqc-milestone-2026" ], "name": "Spain", "status_label": "National guidance or roadmap found" }, { "code": "SE", "agency": { "name": "National Cyber Security Centre Sweden (Nationellt cybersäkerhetscenter, NCSC, at FRA)", "url": "https://www.ncsc.se/" }, "status": "published", "documents": [ { "title": "Nationella rekommendationer för övergången till kvantsäker kryptografi 2026", "publisher": "Nationellt cybersäkerhetscenter vid FRA", "date": "2026-05-27", "date_text": "27 May 2026 (date of the NCSC news item)", "url": "https://www.ncsc.se/siteassets/publikationer/nationella-rekommendationer-for-overgangen-till-kvantsaker-kryptografi-2026_tga.pdf", "retrieved": "2026-10-21", "locator": "Cover; contents, timeline for the transition (finished 2035, finished 2030); news item published 27 May 2026" } ], "checked": "2026-10-21", "note": "The NCSC national recommendations say the transition should be finished by the end of 2035, and by the end of 2030 in some sensitive cases, starting with management attention and an inventory.", "checked_pages": [ "https://www.ncsc.se/sv/aktuellt/kvantsaker-kryptografi/" ], "joint_statements": [], "milestones": [ "eu-pqc-milestone-2026" ], "name": "Sweden", "status_label": "National guidance or roadmap found" } ] }