In short: Every standard and PQC deadline with its status and next milestone. Filter by body, kind or status; each item shows its key facts first and folds its milestones and sources. Filter the tracker
Information only, not compliance or legal advice. Each status, date and deadline is as its official source states it on the date read; check the publisher for the authoritative current version. A milestone that is not verified is never used in the deadlines view, the feed, the early warning or the briefings.
Standards, specifications, committees and migration deadlines on post-quantum cryptography, quantum key distribution and quantum technologies: ETSI, CEN-CENELEC, ISO/IEC, ITU-T, IEEE, NIST and the IETF, the EU roadmap and the national agencies, each with its status and dates, its scope, what it means for organisations and its next milestone.
This page: every standard, committee and deadline with its status and next milestone. The other post-quantum pages: Guide: what post-quantum cryptography is and what to do first; Timeline by authority: the milestones of each EU and national authority, as its source states them; What is due when: everything due in the next 12 to 60 months, in date order, with a calendar feed; Compliance calendar: dated obligations and milestones beyond post-quantum.
ETSI GS QKD 002: Quantum Key Distribution (QKD); Use Cases
Body
ETSI Industry Specification Group on Quantum Key Distribution
Kind
Specification
Status
Published (2010-06). V1.1.1 published 2010-06
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Describes application scenarios where QKD systems serve as building blocks, giving a shared vocabulary for use-case discussions.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the ETSI work-programme entry as shown in search results (WKI_ID=29096); the PDF cover title was truncated in the index. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
ETSI GS QKD 004: Quantum Key Distribution (QKD); Application Interface
Body
ETSI Industry Specification Group on Quantum Key Distribution
Kind
Specification
Status
Published (2020-08). V2.1.1 published 2020-08; V1.1.1 folder dated 2010-12 superseded by V2.1.1
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Defines the interface through which applications request keys from a QKD system, supporting interoperable integration.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V2.1.1 published
Verification
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the etsi.org PDF title as indexed by search; not read from the PDF body. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
ETSI GS QKD 005: Quantum Key Distribution (QKD); Security Proofs
Body
ETSI Industry Specification Group on Quantum Key Distribution
Kind
Specification
Status
Published (2010-12). V1.1.1 published 2010-12; revision RGS/QKD-0005ed2 at stable draft 2026-06-09
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Sets generic requirements for security proofs of QKD protocols, a reference point for security claims; a second edition is in drafting.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the etsi.org PDF title as indexed by search. A revision work item RGS/QKD-0005ed2_SecProofs is at stable draft (2026-06-09) per the ETSI work programme; no target publication date shown. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
ETSI GS QKD 011: Quantum Key Distribution (QKD); Component characterization: characterizing optical components for QKD systems
Body
ETSI Industry Specification Group on Quantum Key Distribution
Kind
Specification
Status
Published (2016-05). V1.1.1 published 2016-05
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Gives procedures for characterising optical components such as sources and single-photon detectors used in QKD systems.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the etsi.org PDF title as indexed by search; not read from the PDF body. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
ETSI GS QKD 012: Quantum Key Distribution (QKD); Device and Communication Channel Parameters for QKD Deployment
Body
ETSI Industry Specification Group on Quantum Key Distribution
Kind
Specification
Status
Published (2019-02). V1.1.1 published 2019-02
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Lists device and channel parameters relevant when planning QKD deployment over existing fibre infrastructure.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the etsi.org PDF title as indexed by search; not read from the PDF body. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the etsi.org PDF title as indexed by search; not read from the PDF body. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
ETSI GS QKD 015: Quantum Key Distribution (QKD); Control Interface for Software Defined Networks
Body
ETSI Industry Specification Group on Quantum Key Distribution
Kind
Specification
Status
Published (2022-04). V2.1.1 published 2022-04; V1.1.1 (folder dated 2021-03) superseded by V2.1.1
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Defines how QKD nodes expose control information to SDN controllers so QKD can be managed within software-defined networks.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V2.1.1 published
Verification
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the etsi.org PDF title as indexed by search; not read from the PDF body. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the etsi.org PDF title as indexed by search; versions and dates also confirmed on the committee page. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
ETSI GS QKD 018: Quantum Key Distribution (QKD); Orchestration Interface for Software Defined Networks
Body
ETSI Industry Specification Group on Quantum Key Distribution
Kind
Specification
Status
Published (2022-04). V1.1.1 published 2022-04
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Specifies an orchestration interface so QKD network resources can be coordinated by SDN orchestrators.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Partly verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title from the etsi.org PDF title as indexed by search; not read from the PDF body. Partly verified: the version and date were read in the ETSI archive, but the title was taken from search results for the official PDF, which could not be read here.
ETSI GS QKD 020: Quantum Key Distribution (QKD); Protocol and data format of REST-based Interoperable Key Management System API
Body
ETSI Industry Specification Group on Quantum Key Distribution
Kind
Specification
Status
Published (2026-06-29). V1.1.1 published 2026-06
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Defines a REST API for interoperability between key management systems of different QKD networks or vendors.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Verified. Latest version folder and its date read today in the ETSI deliver archive listing. Title, version and publication date 2026-06-29 read on the ETSI work-item report (WKI_ID=63115).
Verified. Title, version and publication date read today on the ETSI Work Programme list for TC CYBER QSC; version folder confirmed in the ETSI deliver archive. Titles are reconstructed from line-wrapped table cells.
ETSI TR 103 619: Cyber Security (CYBER); Quantum-Safe Cryptography (QSC); Migration strategies and recommendations to Quantum Safe schemes
Body
ETSI Technical Committee CYBER (Quantum-Safe Cryptography)
Kind
Technical report
Status
Published (2020-07-21). V1.1.1 published 2020-07-21
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Outlines a staged migration approach (inventory, plan, execution) that organisations can use to structure a move to quantum-safe cryptography.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Verified. Title, version and publication date read today on the ETSI Work Programme list for TC CYBER QSC; version folder confirmed in the ETSI deliver archive. Titles are reconstructed from line-wrapped table cells.
ETSI TR 104 016: Cyber Security (CYBER); Quantum-Safe Cryptography (QSC); A Repeatable Framework for Quantum-Safe Migrations
Body
ETSI Technical Committee CYBER (Quantum-Safe Cryptography)
Kind
Technical report
Status
Published (2024-10-25). V1.1.1 published 2024-10-25
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Provides a repeatable framework that organisations can apply to plan and run successive quantum-safe migration projects.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Verified. Title, version and publication date read today on the ETSI Work Programme list for TC CYBER QSC; version folder confirmed in the ETSI deliver archive. Titles are reconstructed from line-wrapped table cells.
ETSI TS 104 015: Cyber Security (CYBER); Quantum-Safe Cryptography (QSC); Efficient Quantum-Safe Hybrid Key Exchanges with Hidden Access Policies
Body
ETSI Technical Committee CYBER (Quantum-Safe Cryptography)
Kind
Specification
Status
Published (2025-02-26). V1.1.1 published 2025-02-26
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Specifies a hybrid key encapsulation scheme with attribute-based access control, relevant to data-sharing systems needing quantum-safe access policies.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: V1.1.1 published
Verification
Verified. Title, version and publication date read today on the ETSI Work Programme list for TC CYBER QSC; version folder confirmed in the ETSI deliver archive. Titles are reconstructed from line-wrapped table cells.
Verified. In-force edition and title read today on the ITU-T Recommendation page; the date is the month/year edition code (approval month), the exact approval day was not read.
ITU-T Y.3801: Functional requirements for quantum key distribution networks
Body
ITU Telecommunication Standardization Sector
Kind
Recommendation
Status
Published (2020-04). Y.3801 (04/20) in force
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Lists functional requirements that QKD network operators and suppliers can map designs against.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: In-force edition approved
Verification
Verified. In-force edition and title read today on the ITU-T Recommendation page; the date is the month/year edition code (approval month), the exact approval day was not read.
ITU-T Y.3802: Quantum key distribution networks - Functional architecture
Body
ITU Telecommunication Standardization Sector
Kind
Recommendation
Status
Published (2020-12). Y.3802 (12/20) in force; Corrigendum 1 (04/21) and Amendment 1 (11/23) in force
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Defines the layered functional architecture of QKD networks used as a reference by later ITU-T QKD Recommendations.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: In-force edition approved
Verification
Verified. In-force edition and title read today on the ITU-T Recommendation page; the date is the month/year edition code (approval month), the exact approval day was not read.
ITU-T Y.3803: Quantum key distribution networks - Key management
Body
ITU Telecommunication Standardization Sector
Kind
Recommendation
Status
Published (2020-12). Y.3803 (12/20) in force; Amendment 1 (11/23) in force
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Specifies key management functions in QKD networks, relevant to how keys are relayed, stored and supplied to applications.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: In-force edition approved
Verification
Verified. In-force edition and title read today on the ITU-T Recommendation page; the date is the month/year edition code (approval month), the exact approval day was not read.
ITU-T Y.3804: Quantum key distribution networks - Control and management
Body
ITU Telecommunication Standardization Sector
Kind
Recommendation
Status
Published (2025-04). Y.3804 (04/25) in force
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Describes control and management functions for operating QKD networks.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: In-force edition approved
Verification
Verified. In-force edition and title read today on the ITU-T Recommendation page; the date is the month/year edition code (approval month), the exact approval day was not read.
ITU-T Y.3810: Quantum key distribution network interworking - Framework
Body
ITU Telecommunication Standardization Sector
Kind
Recommendation
Status
Published (2024-09). Y.3810 (09/24) in force; Corrigendum (12/25) in force
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Provides a framework for interworking between separately operated QKD networks.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: In-force edition approved
Verification
Verified. In-force edition and title read today on the ITU-T Recommendation page; the date is the month/year edition code (approval month), the exact approval day was not read.
Active (2022). Joint technical committee established 2022, building on the CEN-CENELEC Focus Group on Quantum Technologies (2020-2023); four working groups (WG 1 strategic advisory, WG 2 metrology/sensing/imaging and enabling technologies, WG 3 computing and simulation, WG 4 communication and cryptography); DIN secretariat link on the technical body page
Scope
Quantum technologies in general
Jurisdiction
European Union
What it means for organisations
Acts as the European venue where quantum technology standards for computing, sensing and communication are drafted and later adopted as European deliverables.
Verified. Establishment year, scope and working-group structure read on the CEN-CENELEC topic page; committee title and secretariat link read on the technical body page. No exact founding day is given and the committee itself has no dated next milestone, so none is recorded.
JTC22 Q06 (Release 1.1): Standardization Roadmap on Quantum Technologies
Body
CEN and CENELEC (JTC 22 Quantum Technologies)
Kind
Roadmap
Status
Published (2025-06). Release 1.1 dated June 2025 (supersedes FGQT Q04 Release 1); no later release published on the CEN-CENELEC site as of today; a 'Standardization Roadmap 2.0' is being prepared by WG 1 with no stated date
Scope
Quantum technologies in general
Jurisdiction
European Union
What it means for organisations
Maps where European quantum standards are planned or missing across enabling technologies, components, communication, computing and sensing.
Verified. Cover page of the PDF read (title, JTC22 Q06, Release 1.1 - June 2025, written by CEN/CENELEC JTC 22). The topic page still lists Release 1 and Release 1.1 only. A July 2025 news item said an updated edition would follow shortly and the CEN-CENELEC Work Programme 2026 mentions a Roadmap 2.0 under WG 1, but neither gives a date and no Release 2 was found.
EAS 18433:2026: Quantum Computing - High-Level Programming Language
Body
CEN and CENELEC (JTC 22 Quantum Technologies)
Kind
Specification
Status
Published (2026-08-12). Published 2026-08-12 (WI JT022021)
Scope
Quantum computing
Jurisdiction
European Union
What it means for organisations
Provides a European agreed reference for high-level quantum programming languages that software toolchains can align with.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: Published
Verification
Verified. Reference, title, WI and publication date read in the JTC 22 published-standards list. Content of the document itself was not read (paywalled).
prEN IEC/ISO 63607 (CEN WI JT022017; IEC/ISO AWI 63607): Quantum technologies - Terminology and quantities - General quantities
Body
CEN and CENELEC (JTC 22 Quantum Technologies)
Kind
Work item or project
Status
In development (2025-10-20). CEN/CLC: Under Drafting since 2025-10-20, parallel development with IEC/ISO JTC 3; ISO side: AWI, stage 10.99 reached 2026-07-08
Scope
Quantum technologies in general
Jurisdiction
European Union
What it means for organisations
Would give European and international quantum standards one shared set of defined quantities.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Partly verified. Status, initial date and ISO stage 10.99 (2026-07-08) were read. The CEN work-programme page renders as flattened text, so assigning 2026-04-20 (next stage) and 2027-11-22 (forecast voting date) to their columns is inferred from order, not certain.
prEN 18470 (WI JT022006): Quantum technologies - quantum computing - Hybridization of High-Performance Computing and Quantum Computing
Body
CEN and CENELEC (JTC 22 Quantum Technologies)
Kind
Work item or project
Status
In development (2026-09-01). Under Drafting since 2026-09-01
Scope
Quantum computing
Jurisdiction
European Union
What it means for organisations
Would set European requirements for integrating quantum computers with high-performance computing centres.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Partly verified. Reference, title, status and initial date read in the work programme. A date 2028-06-20 appears after this row but the flattened page layout does not show reliably which field or row it belongs to, so it is not recorded as a milestone.
prCEN/CLC/TR 18437 (WI JT022005): Performance benchmarks of quantum computing applications
Body
CEN and CENELEC (JTC 22 Quantum Technologies)
Kind
Work item or project
Status
In development (2025-12-22). Under Drafting since 2025-12-22; a further date 2026-04-20 is shown in the row
Scope
Quantum computing
Jurisdiction
European Union
What it means for organisations
Would describe application-level benchmarks for comparing quantum computing performance.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Partly verified. Reference, title, status and initial date read. The 2026-04-20 date appears to be a next-stage date that has already passed; its column could not be confirmed, so no milestone is recorded.
prCEN/CLC/TR XXX (WI JT022014): Gaps in IT security evaluation of QKD systems and networks
Body
CEN and CENELEC (JTC 22 Quantum Technologies)
Kind
Work item or project
Status
In development (2025-07-24). Under Drafting since 2025-07-24; related WG 4 QKD reports also under drafting: satellite-based QKD needs (JT022011), QKD and PQC comparison (JT022002), quantum and non-quantum SKE methods (JT022024)
Scope
Quantum key distribution
Jurisdiction
European Union
What it means for organisations
Would identify what is missing for security evaluation and certification of QKD systems and networks in Europe.
Partly verified. Title, WI and status read. Later dates in the row (2026-02-01) appear to be next-stage dates that have passed and their columns could not be confirmed, so no milestone is recorded. No document number is assigned yet.
ISO and IEC (JTC 3 Quantum technologies, JTC 1/SC 27)
Kind
Committee or group
Status
Active. Secretariat BSI (United Kingdom); 1 published ISO standard, 12 under development of which 10 under direct JTC 3 responsibility; subcommittee JSC 3A Quantum computing; WGs on terminology, sensors, QRNG, enabling technology, communication
Scope
Quantum technologies in general
Jurisdiction
International
What it means for organisations
Serves as the international committee where quantum computing, sensing, communication and enabling-technology standards are developed jointly by IEC and ISO.
Partly verified. Committee page on iso.org read (WebFetch got HTTP 403; the page was loaded with a direct HTTP client). Creation date is not shown on the iso.org page; the IEC dashboard and iec.ch pages returned HTTP 403.
ISO and IEC (JTC 3 Quantum technologies, JTC 1/SC 27)
Kind
Work item or project
Status
In development (2026-09-04). Ten approved work items, all at stage 10.99 (new project approved): eight reached it on 2026-07-08 (general quantities, photonics vocabulary, general vocabulary, HBT interferometry for photonic sources, cold-atom absolute gravimeters, quantum entropy sources, single-photon detector metrics, QRNG overview); TR 63760 (transmission media for quantum communication) and 63770-1 (quantum sensors overview) on 2026-09-04
Scope
Quantum technologies in general
Jurisdiction
International
What it means for organisations
Signals that international standards on terminology, quantum sensors, random number generators, photonic sources and quantum communication are at an early drafting stage.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Verified. Identifiers, titles, stage 10.99 and stage dates read in the JTC 3 catalogue and RSS feed. ISO does not publish forecast dates on these pages, so no expected milestone is recorded. JSC 3A lists 2 further projects that were not itemised.
ISO/IEC 23837-1:2023: Information security — Security requirements, test and evaluation methods for quantum key distribution — Part 1: Requirements
Body
ISO and IEC (JTC 3 Quantum technologies, JTC 1/SC 27)
Kind
Standard
Status
Published (2023-08-29). Edition 1, published 2023-08 (stage 60.60 on 2023-08-29), 52 pages, ISO/IEC JTC 1/SC 27; no amendment, revision or systematic review shown
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Gives evaluators and vendors a common set of security functional and assurance requirements for evaluating QKD modules under Common Criteria.
Verified. Publication date, edition, stage, pages and committee read in the iso.org standard page and life cycle (loaded with a direct HTTP client after WebFetch got HTTP 403). The life cycle shows no 90.xx review stage and no amendment or replacement.
ISO/IEC 23837-2:2023: Information security — Security requirements, test and evaluation methods for quantum key distribution — Part 2: Evaluation and testing methods
Body
ISO and IEC (JTC 3 Quantum technologies, JTC 1/SC 27)
Kind
Standard
Status
Published (2023-09-25). Edition 1, published 2023-09 (stage 60.60 on 2023-09-25), 106 pages, ISO/IEC JTC 1/SC 27; no amendment, revision or systematic review shown
Scope
Quantum key distribution
Jurisdiction
International
What it means for organisations
Gives testing laboratories common evaluation and test methods for checking QKD modules against the Part 1 requirements.
Verified. Publication date, edition, stage, pages and committee read in the iso.org standard page and life cycle (direct HTTP client; WebFetch got HTTP 403). No later stage, amendment or replacement shown.
IEEE P7130: IEEE Draft Standard for Quantum Technologies Definitions
Body
IEEE Standards Association
Kind
Specification
Status
In development (2021-09-23). Active PAR (approved 2021-09-23), C/SABSC, QCN-WG; PAR extended to 2026-12-31 by the SASB on 2025-12-10; no approved IEEE 7130 standard (no '7130-2023') found
Scope
Quantum technologies in general
Jurisdiction
International
What it means for organisations
Would give a consensus set of quantum technology terms for IEEE and wider use, but it remains a draft.
Verified. Project page shows title, Active PAR and PAR approval 2021-09-23 but not the expiry; expiry read in the SASB minutes of 10 December 2025 (NesCom extension requests, approved on the consent agenda). The brief's 'IEEE 7130-2023' could not be confirmed: no approved standard exists on the project page.
IEEE P1943: Standard for Post-Quantum Network Security
Body
IEEE Standards Association
Kind
Work item or project
Status
In development (2022-06-16). Active PAR, approved 2022-06-16 (COM/NetSoft-SC, QuNET/WG)
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Would specify how existing network security protocols can be run in post-quantum and hybrid modes.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Partly verified. Title, status and PAR approval date read on the project page. The PAR expiry is only on the IEEE myProject PAR detail page, which returned HTTP 502.
IEEE P1947: Standard for Quantum Cybersecurity Framework
Body
IEEE Standards Association
Kind
Work item or project
Status
In development (2024-03-21). Active PAR, approved 2024-03-21 (COM/NetSoft-SC)
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Would describe quantum-era threat vectors to data security and matching defence mechanisms in one framework.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Partly verified. Title, status, committee and PAR approval date read on the project page. PAR expiry not shown there; PAR detail page returned HTTP 502.
IEEE P3329: Standard for Quantum Computing Energy Efficiency
Body
IEEE Standards Association
Kind
Work item or project
Status
In development (2023-02-15). Active PAR, approved 2023-02-15 (C/SABSC, Quantum Energy Initiative WG)
Scope
Quantum computing
Jurisdiction
International
What it means for organisations
Would define metrics relating quantum computing performance to energy consumption across qubit technologies.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Partly verified. Title, status, committee and PAR approval date read on the project page (the IEEE quantum activities page uses a longer title including 'and Simulation'). PAR expiry not shown; PAR detail page returned HTTP 502.
FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard
Body
National Institute of Standards and Technology (United States)
Kind
Standard
Status
Published (2024-08-13). Final published 2024-08-13 (draft 2023-08-24); planning note 2025-11-17 announces a future update/revision to correct an identified issue, no date given
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
Defines ML-KEM, the primary NIST post-quantum key-establishment algorithm that products and protocols are adopting for key exchange.
26 reviewed product assertions name an algorithm it specifies: Botan project Botan, Canonical (Ubuntu) Ubuntu, Entrust Entrust nShield HSM (Security World), Fortinet Fortinet FortiOS (FortiGate), Google Google Cloud Key Management Service, Keyfactor (EJBCA) Keyfactor EJBCA, Legion of the Bouncy Castle Bouncy Castle for Java, Microsoft .NET, Microsoft Windows Server, Mozilla Mozilla NSS (Network Security Services), Node.js project (OpenJS Foundation) Node.js, Open Quantum Safe project liboqs (Open Quantum Safe), OpenJDK project OpenJDK (Java SE), OpenSSL Project OpenSSL, PQShield PQShield PQCryptoLib-Core, Red Hat Red Hat Enterprise Linux, Thales Thales Luna Network HSM 7, The Go project Go (crypto/tls and crypto packages), Utimaco Utimaco u.trust General Purpose HSM Se-Series, strongSwan project strongSwan, wolfSSL wolfSSL. Vendor statements, not certification.
Verification
Verified. Status, release date and the 2025-11-17 planning note (future update/revision, errata spreadsheet) read on the CSRC publication page; no revision draft is published and no revision date is stated.
FIPS 204: Module-Lattice-Based Digital Signature Standard
Body
National Institute of Standards and Technology (United States)
Kind
Standard
Status
Published (2024-08-13). Final published 2024-08-13 (draft 2023-08-24); 2026-07-31 note links an errata list of minor issues to be corrected in a future update/revision, no date given
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
Defines ML-DSA, the primary NIST post-quantum digital signature algorithm for certificates, code signing and authentication.
28 reviewed product assertions name an algorithm it specifies: Amazon Web Services AWS Key Management Service, Botan project Botan, Canonical (Ubuntu) Ubuntu, Cloudflare Cloudflare network, Entrust Entrust nShield HSM (Security World), GnuTLS project GnuTLS, Google Google Cloud Key Management Service, Keyfactor (EJBCA) Keyfactor EJBCA, Legion of the Bouncy Castle Bouncy Castle for Java, Microsoft .NET, Microsoft Windows Server, Mozilla Mozilla NSS (Network Security Services), Node.js project (OpenJS Foundation) Node.js, Open Quantum Safe project liboqs (Open Quantum Safe), OpenJDK project OpenJDK (Java SE), OpenSSL Project OpenSSL, PQShield PQShield PQCryptoLib-Core, Red Hat Red Hat Enterprise Linux, Securosys Securosys Primus HSM, Thales Thales Luna Network HSM 7, The Go project Go (crypto/tls and crypto packages), Utimaco Utimaco u.trust General Purpose HSM Se-Series, wolfSSL wolfSSL. Vendor statements, not certification.
Verification
Verified. Status, release date and the 2026-07-31 errata/future-revision note read on the CSRC page; no revision draft is published and no revision date is stated.
FIPS 205: Stateless Hash-Based Digital Signature Standard
Body
National Institute of Standards and Technology (United States)
Kind
Standard
Status
Published (2024-08-13). Final published 2024-08-13 (draft 2023-08-24); no revision notice listed; related draft SP 800-230 (additional SLH-DSA parameter sets) released 2026-04-13
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
Defines SLH-DSA, a hash-based signature algorithm offering a conservative alternative to lattice-based signatures.
10 reviewed product assertions name an algorithm it specifies: Botan project Botan, Canonical (Ubuntu) Ubuntu, Entrust Entrust nShield HSM (Security World), Google Google Cloud Key Management Service, Legion of the Bouncy Castle Bouncy Castle for Java, Microsoft .NET, OpenSSL Project OpenSSL, Red Hat Red Hat Enterprise Linux, Utimaco Utimaco u.trust General Purpose HSM Se-Series. Vendor statements, not certification.
Verification
Verified. Status and date read on the CSRC page; no planning note or revision listed. SP 800-230 ipd date read on the PQC workshops and timeline page.
National Institute of Standards and Technology (United States)
Kind
Specification
Status
In development. No initial public draft published as of 2026-10-25; FALCON listed as 'FIPS coming soon'
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
A compact lattice-based signature standard is still pending, so products needing small signatures cannot yet rely on a NIST-final FN-DSA.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Partly verified. Absence of a draft confirmed on three official pages today: FIPS publications list has no FIPS 206 entry, the selected-algorithms page labels FALCON 'FIPS coming soon', and the presumed draft URL csrc.nist.gov/pubs/fips/206/ipd returned 404. The March 2025 NIST news release says the FALCON draft would be released 'shortly as FIPS 206' but gives no date. No comment period exists to report.
HQC (planned FIPS): HQC selected for standardization (NIST IR 8545 rationale)
Body
National Institute of Standards and Technology (United States)
Kind
Work item or project
Status
In development (2025-03-11). Selected 2025-03-11; draft standard not published as of 2026-10-25 ('FIPS coming soon'); NIST stated a draft in about a year and a final in 2027
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
Provides a code-based backup KEM to ML-KEM, but organisations cannot yet implement against a published HQC draft or final standard.
Partly verified. Selection date and 2027 expectation read today. The news release foresaw a draft for public comment 'in about a year' (about March 2026) with a 90-day comment period; no draft is listed on the FIPS publications page, the drafts-open-for-comment page or the selected-algorithms page, and csrc.nist.gov/pubs/fips/207/ipd returned 404. The FIPS 207 number appears only in a 2025 NIST conference presentation found by search, not on a publication page, so no draft date or comment deadline exists to report.
NIST IR 8547 ipd: Transition to Post-Quantum Cryptography Standards
Body
National Institute of Standards and Technology (United States)
Kind
Migration deadlines
Status
Draft (2024-11-12). Initial public draft released 2024-11-12; comments closed 2025-01-10; still ipd on 2026-10-25 (comments received posted); no final
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
Signals that NIST plans to deprecate 112-bit quantum-vulnerable RSA, ECC and DH after 2030 and disallow all of them after 2035, which sets the planning horizon for US federal and FIPS-validated systems. Its 2030 and 2035 dates are proposals of an initial public draft, shown as targets, not as deadlines, until NIST publishes a final version.
Next milestone
: Proposed (draft, not final): quantum-vulnerable algorithms at 112-bit strength deprecated (112-bit security strength (RSA, ECDSA, finite-field and EC DH/MQV)) · Target date · NIST: NIST IR 8547 ipd (PDF) (read 2026-10-25; Section 4.1.1 Table 2 (signatures) and Section 4.1.2 Table 4 (key establishment))
Milestones, links, verification and sources
Dated milestones
: IPD comment period closed
: Proposed (draft, not final): quantum-vulnerable algorithms at 112-bit strength deprecated (112-bit security strength (RSA, ECDSA, finite-field and EC DH/MQV))
: Proposed (draft, not final): quantum-vulnerable signature and key-establishment algorithms disallowed (All security strengths (RSA, ECDSA, EdDSA, DH, MQV))
Verified. Draft status, release date and comment close read on the CSRC page; 2030/2035 transition dates read in the ipd PDF text (Tables 2 and 4). No final version is listed.
NIST: NIST IR 8547 ipd (PDF) (read 2026-10-25; Section 4.1.1 Table 2 (signatures) and Section 4.1.2 Table 4 (key establishment))
NIST IR 8610: Status Report on the Second Round of the Additional Digital Signature Schemes for the NIST Post-Quantum Cryptography Standardization Process
Body
National Institute of Standards and Technology (United States)
Kind
Technical report
Status
Published (2026-05-14). Final 2026-05-14; nine candidates advanced to round 3 (FAEST, HAWK, MAYO, MQOM, QR-UOV, SDitH, SNOVA, SQIsign, UOV)
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
Narrows the additional signature on-ramp to nine round-3 candidates, so further NIST signature standards beyond ML-DSA, SLH-DSA and FN-DSA remain some years away.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: Round 2 status report; round 3 candidates announced
Verification
Verified. Report status, date and round-3 candidate list read on the CSRC page; no round-3 end date is stated.
18 reviewed product assertions name an algorithm it specifies: Amazon Web Services AWS Key Management Service, Apple Apple iOS and iPadOS, Apple Apple macOS, Botan project Botan, Cloudflare Cloudflare network, GnuTLS project GnuTLS, Google Google Chrome, Mozilla Mozilla Firefox, Mozilla Mozilla NSS (Network Security Services), OpenJDK project OpenJDK (Java SE), OpenSSL Project OpenSSL, Red Hat Red Hat Enterprise Linux, SUSE SUSE Linux Enterprise Server, The Go project Go (crypto/tls and crypto packages). Vendor statements, not certification.
Verification
Verified. Number, title, status, month and source draft read on datatracker; title and status confirmed on rfc-editor.org (which shows only the year 2026).
draft-ietf-tls-mlkem-11: ML-KEM Post-Quantum Key Agreement for TLS 1.3
Body
Internet Engineering Task Force
Kind
Specification
Status
In development (2026-09-16). Version 11 (2026-09-16); IESG state RFC Ed Queue, awaiting first edit; intended Informational; no RFC number yet
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Pure ML-KEM key agreement for TLS 1.3 is approved and in the RFC Editor queue, offering a non-hybrid option once published.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: Version -11 posted
Verification
Verified. Version, IESG/RFC Editor state, intended status and dates read on datatracker. No expected RFC publication date is stated. Re-checked on 27 October 2026 through the datatracker JSON API (doc/document and newrevisiondocevent): revision 11 is still the latest, posted 2026-09-17 04:19 UTC (16 September in US time); the document record was last changed on 2026-10-12 by a state change, not by a new revision.
draft-ietf-lamps-pq-composite-sigs-19: Composite Module-Lattice-Based Digital Signature Algorithm (ML-DSA) for use in X.509 Public Key Infrastructure
Body
Internet Engineering Task Force
Kind
Specification
Status
In development (2026-04-21). Version 19 (2026-04-21); IESG state RFC Ed Queue, RFC Editor state blocked pending final approval; intended Proposed Standard; no RFC number yet
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Composite ML-DSA plus traditional signatures for X.509 are approved and queued for publication, supporting hybrid certificate migration strategies.
Verified. Version, states and dates read on datatracker; the page shows an expiry date of 23 October 2026 while the document sits in the RFC Editor queue (queue documents do not lapse in practice). No expected RFC date is stated. Re-checked on 27 October 2026 through the datatracker JSON API: revision 19 (posted 2026-04-21) is still the latest; the record was last changed on 2026-10-20 by a state change, not by a new revision.
Partly verified. The Commission library page and the PQC policy page returned HTTP 403 to both WebFetch and curl today, so the exact 23 June 2025 date and any Part 2 publication could not be read there. Milestones and 'released (June 2025)' were read in a Commission presentation hosted on enisa.europa.eu (April 2026); its slide 6 prints the 2030 milestone as '21/12/2030', while slide 7 says 'End of 2030', so 2030-12-31 is used. A search snippet of the policy page mentions a second supplementary deliverable in preparation, but this could not be read on the page and no publication date is confirmed.
Commission Recommendation (EU) 2024/1101: Commission Recommendation (EU) 2024/1101 of 11 April 2024 on a Coordinated Implementation Roadmap for the transition to Post-Quantum Cryptography
Body
European Union (Commission and NIS Cooperation Group)
Kind
Recommendation
Status
Active (2024-04-12). Adopted 2024-04-11, published OJ L 2024/1101 on 2024-04-12; effects to be assessed at most three years after publication
Scope
Post-quantum cryptography
Jurisdiction
European Union
What it means for organisations
Created the NIS Cooperation Group PQC sub-group and the mandate for the coordinated roadmap, with an assessment of its effects due by 12 April 2027.
Verified. Title, adoption date, OJ date and review clause (point 11, section 4) read in the official OJ text served by the EU Publications Office (EUR-Lex itself returned an empty 202 challenge). The review date 2027-04-12 is computed from the stated 'three years after publication' and the 12.4.2024 publication date.
ECCG Agreed Cryptographic Mechanisms v3 (draft): ECCG Agreed Cryptographic Mechanisms - version 3 - draft for public review
Body
European Cybersecurity Certification Group and ENISA (EUCC)
Kind
Specification
Status
Draft (2026-06-02). Draft for public review posted 2026-06-02 with change log; review open until end of July 2026; not yet adopted as of 2026-10-25
Scope
Post-quantum cryptography
Jurisdiction
European Union
What it means for organisations
Signals the next revision of the EUCC agreed mechanisms list; v2 remains the applicable version until v3 is adopted.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: Version 3 draft for public review posted
: Public review closed
Verification
Verified. Draft posting date, review end and continued 'applicable version' status of v2 read on the ENISA page. No adoption date for v3 is stated. The same page also lists an ENISA report on hybridisation of traditional cryptography with PQC dated 30 April 2026.
Implementing Regulation (EU) 2024/482: Commission Implementing Regulation (EU) 2024/482 of 31 January 2024 laying down rules for the application of Regulation (EU) 2019/881 as regards the adoption of the European Common Criteria-based cybersecurity certification scheme (EUCC)
Body
European Cybersecurity Certification Group and ENISA (EUCC)
Kind
EU legal act
Status
Active (2025-02-27). Adopted 2024-01-31, published OJ 2024-02-07; applies from 2025-02-27
Scope
Quantum technologies in general
Jurisdiction
European Union
What it means for organisations
Establishes the EU-wide Common Criteria certification scheme under which the ECCG agreed cryptographic mechanisms are applied.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: Published in the Official Journal
: EUCC scheme applies
Verification
Verified. Title, adoption date, OJ date and application date (Article 50) read in the official OJ text served by the EU Publications Office; EUR-Lex returned an empty 202 challenge.
ANSSI PQC page and PQC FAQ (cyber.gouv.fr): Cryptographie post-quantique (PQC) / FaQ sur la Cryptographie post-quantique (PQC)
Body
ANSSI (France)
Kind
Migration deadlines
Status
Active. Pages exist on cyber.gouv.fr but could not be read today (bot-protection interstitial); content and dates unconfirmed
Scope
Post-quantum cryptography
Jurisdiction
France
What it means for organisations
Would set the years from which PQC becomes a condition for French product qualification and when classical-only products stop being a reasonable purchase.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Not verified. Both cyber.gouv.fr pages (FR and EN) returned an Incapsula bot-protection interstitial to WebFetch and curl; no bypass attempted. Search-engine snippets (not read on the page) suggested ANSSI aims at PQC obligations for entry into qualification for at least some product types from 2027, and considers buying non-PQC products after 2030 unreasonable; these years are NOT recorded as milestones because they were not read on the official page today. The 2025/2026 per-year qualification schedule asked for (2025/2026/2027, after 2030) could not be confirmed.
: Aim for post-quantum security for mechanisms used beyond this date or exposed to retroactive attack (RecoSécuLongTerme)
: 2048-bit minimum modulus acceptable only for use up to end of 2030; 3072 bits from 2031 (RSA factorisation and finite-field discrete-log moduli (RègleFactorisation))
Verification
Verified. PDF downloaded from messervices.cyber.gouv.fr and text extracted; version, date and both rules read directly. The 2030-12-31 row is a classical key-size limit, included because it is a dated end-of-use rule in the same guide.
ANSSI PQC position paper (2022) and follow-up (2023): ANSSI views on the Post-Quantum Cryptography transition / Avis de l'ANSSI sur la migration vers la cryptographie post-quantique (suivi 2023)
Body
ANSSI (France)
Kind
Migration deadlines
Status
Published (2023-12-21). 2022 position paper; follow-up dated 21 December 2023 accelerates the agenda
Scope
Post-quantum cryptography
Jurisdiction
France
What it means for organisations
Describes the phased French approach to security visas, with hybrid PQC expected for products protecting information beyond 2030.
: First French security visas for products with hybrid PQC expected
: ANSSI position: hybrid PQC for products protecting confidentiality beyond 2030 or used after 2030
Verification
Verified. 2022 page on messervices read via WebFetch (page dated 4 January 2022); 2023 follow-up PDF downloaded and text extracted (dated 21 December 2023). These are earlier positions; the newer 2025/2026 product timeline on cyber.gouv.fr could not be read (see separate item). The 2024 row stands for the stated range 2024-2025.
Leitlinie zur Umstellung auf PQC (BMI/BMDS/BSI, Artikelnummer BMI26024): Nationale Umsetzung der EU-Roadmap zur Umstellung auf Post-Quanten-Kryptografie
Body
BSI (Germany)
Kind
Migration deadlines
Status
Published (2026-10-12). Joint guideline of BMDS, BMI and BSI; document header dated 11 September 2026 (Stand August 2026); published with BSI press release of 12.10.2026
Scope
Post-quantum cryptography
Jurisdiction
Germany
What it means for organisations
Transfers the EU roadmap's risk-based deadlines into a German national timeline for administrations, critical infrastructure operators and companies.
Next milestone
: Initial preparation and planning phase (PQC readiness) complete and first migration steps started · Deadline · BSI: Nationale Umsetzung der EU-Roadmap zur Umstellung auf Post-Quanten-Kryptografie (PDF) (read 2026-10-25; Header (11. September 2026); section 3 Zeitplan; section 4 intro; 4.1 Fristen verbindlich machen; inventory subsection; Impressum (Stand August 2026))
Milestones, links, verification and sources
Dated milestones
: Initial preparation and planning phase (PQC readiness) complete and first migration steps started
: Initial cryptographic inventory complete
: Responsible bodies (e.g. IT-Planungsrat, UP KRITIS) adopt the deadlines as binding where possible
: High-risk use cases quantum-safe (High risk)
: Medium-risk use cases quantum-safe; transition largely complete for nearly all systems (Medium risk)
Verified. Guideline PDF (646 KB) retrieved from bsi.bund.de and text extracted; dates read in the summary box, section 3 'Zeitplan', section 4 intro, 4.1 and the inventory subsection. Press release read for publication date. The PDF calls the deadlines urgent recommendations, not legally binding.
BSI TR-02102-1 Version 2026-01: Kryptographische Verfahren: Empfehlungen und Schlüssellängen
Body
BSI (Germany)
Kind
Migration deadlines
Status
Published (2026-01-23). Version 2026-01 (Stand 23 January 2026) adds migration deadlines and announces end of sole use of classical asymmetric schemes
Scope
Post-quantum cryptography
Jurisdiction
Germany
What it means for organisations
Gives German product and system designers dates after which classical key agreement and, later, classical signatures are recommended only in hybrid combination with PQC.
Next milestone
: Switch to quantum-safe key agreement for very high protection needs (Applications with very high protection needs) · Deadline · BSI: TR-02102-1 Kryptographische Verfahren: Empfehlungen und Schlüssellängen (PDF) (read 2026-10-25; Cover and version table (2026-01, 23.01.2026); section 2.1 Einsatz quantensicherer Verfahren; section 2.3 Klassische asymmetrische Verfahren)
Milestones, links, verification and sources
Dated milestones
: Switch to quantum-safe key agreement for very high protection needs (Applications with very high protection needs)
: End of the period in which the guideline lists classical key agreement on its own; hybrid with a PQC KEM afterwards (Key agreement / encryption)
: Classical signature schemes expected to remain in the guideline only until the end of 2035 (Signatures)
Verified. TR PDF downloaded from bsi.bund.de and text extracted; version table and sections 2.1 and 2.3 read. Press release of 11.02.2026 confirms the same three dates. The new guideline cites a TR-02102-1 edition dated December 2026, which is not yet available; the current file is version 2026-01.
Netherlands government (NLNCSA, AIVD and ministries)
Kind
Migration deadlines
Status
Published (2026-10-05). Government-wide quantum strategy presented by the Cabinet on 5 October 2026; contains the PQC migration timeline for the Rijksoverheid (reviewed annually by programme Quantumveilige Cryptografie NL)
Scope
Post-quantum cryptography
Jurisdiction
Netherlands
What it means for organisations
Sets yearly PQC migration targets for Dutch central government organisations aligned with the EU roadmap, ending with medium-risk use cases by end-2035.
Next milestone
: Quantum risk in risk management; own cryptography policy per Rijksbreed Beleidskader Cryptografie · Target date · Rijksoverheid (open.overheid.nl): Rijksbrede Quantumstrategie (PDF) (read 2026-10-25; Section 4.1.1 Voorbereiden van de Rijksoverheid op de quantumdreiging, box 'PQC-migratie tijdpad voor de Nederlandse Rijksoverheid' (page 36))
Milestones, links, verification and sources
Dated milestones
: Quantum risk in risk management; own cryptography policy per Rijksbreed Beleidskader Cryptografie
: HNDL mitigations; (draft) PQC migration planning and pilots; crypto asset management; staffing and budget insight
: PQC requirements in procurement; guidance and policy for essential entities
: PQC migration of high-risk use cases completed; software and firmware quantum-safe by default (High risk)
: PQC migration of medium-risk use cases completed (Medium risk)
: PQC migration of low-risk use cases completed as far as possible (Low risk)
Verification
Verified. Strategy PDF from open.overheid.nl retrieved and text extracted; timeline box read in section 4.1.1. Presentation date read on the rijksoverheid.nl news item (5 October 2026). The document is from the Cabinet (lead ministry EZK, timeline coordinated by BZK), not from NLNCSA or AIVD; it is grouped under nlncsa as the Dutch national entry. The text says the government strives to follow this timeline and that it may be adjusted.
: Develop an initial departmental PQC migration plan
: Report on PQC migration progress (annual)
: Completion of PQC migration of high priority systems (High priority systems)
: Completion of PQC migration of remaining systems (Remaining systems)
Verification
Verified. Page read on cyber.gc.ca. Scope is non-classified systems (UNCLASSIFIED, PROTECTED A, PROTECTED B); classified and PROTECTED C systems need separate Cyber Centre advice. Section 4 notes that meeting milestones means disabling, isolating or tunnelling quantum-vulnerable algorithms.
TBS Security Policy Implementation Notice (SPIN) on PQC migration: Migrating the Government of Canada to Post-Quantum Cryptography: Security Policy Implementation Notice
Body
Government of Canada (Canadian Centre for Cyber Security; Treasury Board Secretariat)
Kind
Migration deadlines
Status
Active (2025-10-09). Effective 9 October 2025
Scope
Post-quantum cryptography
Jurisdiction
Canada
What it means for organisations
Turns the Cyber Centre roadmap into dated obligations for federal departments and Shared Services Canada, including PQC clauses in new contracts.
: PQC procurement clauses in contracts for digital components entered after this date (Procurement)
: Plans updated to guide Phase 2
: System records updated, high-priority systems identified, Phase 3 plans, transition of systems begins
: PQC migration of high-priority systems complete (High priority systems)
: PQC migration of remaining systems complete (Remaining systems)
Verification
Verified. Page read on canada.ca. Issued by the Treasury Board of Canada Secretariat, not by the Cyber Centre; grouped under cccs only because the schema has no separate Canadian policy body. It cites ITSM.40.001.
CNSA 2.0: Announcing the Commercial National Security Algorithm Suite 2.0
Body
National Security Agency (United States)
Kind
Migration deadlines
Status
Active. Official documents could not be read today (HTTP 403 from media.defense.gov and nsa.gov)
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
Would set per-category years by which US National Security Systems support, prefer and then exclusively use quantum-resistant CNSA 2.0 algorithms.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Not verified. All official URLs returned HTTP 403 to WebFetch and curl today: CSA PDF (2022 and May 2025 versions on media.defense.gov), CNSA 2.0 FAQ (v2.2 and earlier), NSA PQC resource hub and NSA press release on nsa.gov, and the CSfC PQC addendum. No per-category 'support and prefer by' / 'exclusively use by' years, the 2035 NSM-10 goal, or the CNSSP 15 / 1 January 2027 acquisition requirement could be read on an official page, so no milestones are recorded. Search-engine snippets (unverified, not used) mentioned 2025/2030 for software and firmware signing, 2027/2033 for operating systems, 2033 for custom and legacy equipment, 1 January 2027 for new NSS acquisitions, and 2035 overall; these need re-checking from a network that can reach media.defense.gov. Tried again on 27 October 2026: both media.defense.gov PDFs still answered HTTP 403, so CNSA 2.0 stays not verified and no date is shown; an editor reading the advisory in a normal browser can add the milestones with their page locator.
RFC 9340: Architectural Principles for a Quantum Internet
Body
Internet Engineering Task Force
Kind
Technical report
Status
Published (2023-03). Informational, IRTF stream, Quantum Internet Research Group (QIRG); published March 2023 (from draft-irtf-qirg-principles); not an Internet Standards Track specification
Scope
Quantum technologies in general
Jurisdiction
International
What it means for organisations
Sets out the research group's architectural principles for networks that distribute entanglement, a shared reference for quantum-internet design work.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: RFC published
Verification
Verified. Title, Informational status, IRTF stream and QIRG read on rfc-editor.org (which shows only the year 2023); month and source draft read on datatracker, 27 October 2026.
RFC 9583: Application Scenarios for the Quantum Internet
Body
Internet Engineering Task Force
Kind
Technical report
Status
Published (2024-06). Informational, IRTF stream, Quantum Internet Research Group (QIRG); published June 2024 (from draft-irtf-qirg-quantum-internet-use-cases); not an Internet Standards Track specification
Scope
Quantum technologies in general
Jurisdiction
International
What it means for organisations
Describes the application scenarios the research group expects a quantum internet to serve, as input to protocol and architecture work.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
: RFC published
Verification
Verified. Title, Informational status, IRTF and QIRG read on rfc-editor.org (which shows only the year 2024); month, stream and source draft read on datatracker, 27 October 2026.
IEEE P7131: Standard for Quantum Computing Performance Metrics & Performance Benchmarking
Body
IEEE Standards Association
Kind
Work item or project
Status
Withdrawn (2024-12-09). Expired PAR administratively withdrawn at NesCom on 2024-12-09 (C/SABSC); project page no longer available
Scope
Quantum computing
Jurisdiction
International
What it means for organisations
Leaves no active IEEE standard project on quantum computing performance benchmarking under this number.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Verified. Withdrawal read in the NesCom minutes of 9 December 2024 (2.1.1 Administratively Withdrawn PARs) and the December 2024 list of PARs for administrative withdrawal. The former project page returns an unavailable message.
IEEE P3172: Recommended Practice for Post-Quantum Cryptography Migration
Body
IEEE Standards Association
Kind
Work item or project
Status
Withdrawn (2025-11-04). PAR withdrawn by the SASB on 2025-11-04 (C/CPSC)
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Leaves no active IEEE recommended practice on PQC migration under this number.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Verified. Title and withdrawal read on the SASB board actions page of 4 November 2025. The original PAR approval (May 2022) was seen only in search results, not on a fetched page.
IEEE P3185: Standard for Hybrid Quantum-Classical Computing
Body
IEEE Standards Association
Kind
Work item or project
Status
Withdrawn (2025-09-10). PAR withdrawn by the SASB on 2025-09-10 (C/SABSC); project page now unavailable though the IEEE quantum activities page still features it
Scope
Quantum computing
Jurisdiction
International
What it means for organisations
Leaves no active IEEE standard project on hybrid quantum-classical computing architecture under this number.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Verified. Withdrawal read on the SASB board actions page of 10 September 2025. The project page returned an unavailable message today; the IEEE quantum standards activities page still lists it as a featured project, which looks out of date.