Skip to main content

Standards and PQC deadline tracker

In short: Every standard and PQC deadline with its status and next milestone. Filter by body, kind or status; each item shows its key facts first and folds its milestones and sources. Filter the tracker

Information only, not compliance or legal advice. Each status, date and deadline is as its official source states it on the date read; check the publisher for the authoritative current version. A milestone that is not verified is never used in the deadlines view, the feed, the early warning or the briefings.

Standards, specifications, committees and migration deadlines on post-quantum cryptography, quantum key distribution and quantum technologies: ETSI, CEN-CENELEC, ISO/IEC, ITU-T, IEEE, NIST and the IETF, the EU roadmap and the national agencies, each with its status and dates, its scope, what it means for organisations and its next milestone.

This page: every standard, committee and deadline with its status and next milestone. The other post-quantum pages: Guide: what post-quantum cryptography is and what to do first; Timeline by authority: the milestones of each EU and national authority, as its source states them; What is due when: everything due in the next 12 to 60 months, in date order, with a calendar feed; Compliance calendar: dated obligations and milestones beyond post-quantum.

Tracked items by body and status
BodyPublishedDraftIn developmentActiveWithdrawnTotal
ETSI ISG QKD10001011
ETSI TC CYBER400004
CEN-CENELEC5051011
ISO/IEC301105
ITU-T600006
IEEE004059
NIST512008
IETF702009
EU100102
ECCG / EUCC010203
ANSSI200103
BSI200103
Netherlands100001
NCSC-UK100001
Canada (CCCS, TBS)100102
NSA000101

Verification of the items on the date read: Verified: 57; Partly verified: 20; Not verified: 2.

9 items

RFC 10024: Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3

Body
Internet Engineering Task Force
Kind
Standard
Status
Published (2026-08). Proposed Standard, published August 2026 (from draft-ietf-tls-ecdhe-mlkem-05, TLS WG)
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Standardises hybrid ECDHE plus ML-KEM key agreement in TLS 1.3, the configuration already widely deployed in browsers and servers.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : RFC published
In the portal
Reference record
Products in the navigator
18 reviewed product assertions name an algorithm it specifies: Amazon Web Services AWS Key Management Service, Apple Apple iOS and iPadOS, Apple Apple macOS, Botan project Botan, Cloudflare Cloudflare network, GnuTLS project GnuTLS, Google Google Chrome, Mozilla Mozilla Firefox, Mozilla Mozilla NSS (Network Security Services), OpenJDK project OpenJDK (Java SE), OpenSSL Project OpenSSL, Red Hat Red Hat Enterprise Linux, SUSE SUSE Linux Enterprise Server, The Go project Go (crypto/tls and crypto packages). Vendor statements, not certification.
Verification
Verified. Number, title, status, month and source draft read on datatracker; title and status confirmed on rfc-editor.org (which shows only the year 2026).
Sources

draft-ietf-tls-mlkem-11: ML-KEM Post-Quantum Key Agreement for TLS 1.3

Body
Internet Engineering Task Force
Kind
Specification
Status
In development (2026-09-16). Version 11 (2026-09-16); IESG state RFC Ed Queue, awaiting first edit; intended Informational; no RFC number yet
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Pure ML-KEM key agreement for TLS 1.3 is approved and in the RFC Editor queue, offering a non-hybrid option once published.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : Version -11 posted
Verification
Verified. Version, IESG/RFC Editor state, intended status and dates read on datatracker. No expected RFC publication date is stated. Re-checked on 27 October 2026 through the datatracker JSON API (doc/document and newrevisiondocevent): revision 11 is still the latest, posted 2026-09-17 04:19 UTC (16 September in US time); the document record was last changed on 2026-10-12 by a state change, not by a new revision.
Sources

RFC 9881: Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA)

Body
Internet Engineering Task Force
Kind
Standard
Status
Published (2025-10). Proposed Standard, published October 2025 (from draft-ietf-lamps-dilithium-certificates)
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Fixes how ML-DSA keys and signatures are encoded in X.509 certificates and CRLs, enabling interoperable post-quantum PKI.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : RFC published
Verification
Verified. RFC number, state and month read on datatracker; title and status confirmed on rfc-editor.org.
Sources

RFC 9935: Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM)

Body
Internet Engineering Task Force
Kind
Standard
Status
Published (2026-03). Proposed Standard, published March 2026 (from draft-ietf-lamps-kyber-certificates)
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Defines how ML-KEM public keys appear in X.509 certificates, allowing certified KEM keys for encryption use cases.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : RFC published
Verification
Verified. RFC number, title, status and month read on datatracker.
Sources

RFC 9936: Use of ML-KEM in the Cryptographic Message Syntax (CMS)

Body
Internet Engineering Task Force
Kind
Standard
Status
Published (2026-03). Proposed Standard, published March 2026 (from draft-ietf-lamps-cms-kyber)
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Enables post-quantum protection of CMS-based content such as S/MIME email and signed or encrypted files using ML-KEM.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : RFC published
Verification
Verified. RFC number, title, status and month read on datatracker.
Sources

draft-ietf-lamps-pq-composite-sigs-19: Composite Module-Lattice-Based Digital Signature Algorithm (ML-DSA) for use in X.509 Public Key Infrastructure

Body
Internet Engineering Task Force
Kind
Specification
Status
In development (2026-04-21). Version 19 (2026-04-21); IESG state RFC Ed Queue, RFC Editor state blocked pending final approval; intended Proposed Standard; no RFC number yet
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Composite ML-DSA plus traditional signatures for X.509 are approved and queued for publication, supporting hybrid certificate migration strategies.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : Version -19 posted
Products in the navigator
2 reviewed product assertions name an algorithm it specifies: Microsoft .NET, Microsoft Windows Server. Vendor statements, not certification.
Verification
Verified. Version, states and dates read on datatracker; the page shows an expiry date of 23 October 2026 while the document sits in the RFC Editor queue (queue documents do not lapse in practice). No expected RFC date is stated. Re-checked on 27 October 2026 through the datatracker JSON API: revision 19 (posted 2026-04-21) is still the latest; the record was last changed on 2026-10-20 by a state change, not by a new revision.
Sources

RFC 9980: Post-Quantum Cryptography in OpenPGP

Body
Internet Engineering Task Force
Kind
Standard
Status
Published (2026-06). Proposed Standard, published June 2026 (from draft-ietf-openpgp-pqc-17)
Scope
Post-quantum cryptography
Jurisdiction
International
What it means for organisations
Adds ML-KEM and ML-DSA based algorithms to OpenPGP, enabling post-quantum encrypted and signed email and files in that ecosystem.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : RFC published
Verification
Verified. RFC number, title, status and month read on datatracker.
Sources

RFC 9340: Architectural Principles for a Quantum Internet

Body
Internet Engineering Task Force
Kind
Technical report
Status
Published (2023-03). Informational, IRTF stream, Quantum Internet Research Group (QIRG); published March 2023 (from draft-irtf-qirg-principles); not an Internet Standards Track specification
Scope
Quantum technologies in general
Jurisdiction
International
What it means for organisations
Sets out the research group's architectural principles for networks that distribute entanglement, a shared reference for quantum-internet design work.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : RFC published
Verification
Verified. Title, Informational status, IRTF stream and QIRG read on rfc-editor.org (which shows only the year 2023); month and source draft read on datatracker, 27 October 2026.
Sources

RFC 9583: Application Scenarios for the Quantum Internet

Body
Internet Engineering Task Force
Kind
Technical report
Status
Published (2024-06). Informational, IRTF stream, Quantum Internet Research Group (QIRG); published June 2024 (from draft-irtf-qirg-quantum-internet-use-cases); not an Internet Standards Track specification
Scope
Quantum technologies in general
Jurisdiction
International
What it means for organisations
Describes the application scenarios the research group expects a quantum internet to serve, as input to protocol and architecture work.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Dated milestones
  • : RFC published
Verification
Verified. Title, Informational status, IRTF and QIRG read on rfc-editor.org (which shows only the year 2024); month, stream and source draft read on datatracker, 27 October 2026.
Sources

Sources compiled 2026-10-27; assembled 2026-11-02. Reviewed every 90 days. Past milestones of the PQC transition are on the migration timeline.