Standards and PQC deadline tracker

In short: Every standard and PQC deadline with its status and next milestone. Filter by body, kind or status; each item shows its key facts first and folds its milestones and sources. Filter the tracker

Information only, not compliance or legal advice. Each status, date and deadline is as its official source states it on the date read; check the publisher for the authoritative current version. A milestone that is not verified is never used in the deadlines view, the feed, the early warning or the briefings.

Standards, specifications, committees and migration deadlines on post-quantum cryptography, quantum key distribution and quantum technologies: ETSI, CEN-CENELEC, ISO/IEC, ITU-T, IEEE, NIST and the IETF, the EU roadmap and the national agencies, each with its status and dates, its scope, what it means for organisations and its next milestone.

This page: every standard, committee and deadline with its status and next milestone. The other post-quantum pages: Guide: what post-quantum cryptography is and what to do first; Timeline by authority: the milestones of each EU and national authority, as its source states them; What is due when: everything due in the next 12 to 60 months, in date order, with a calendar feed; Compliance calendar: dated obligations and milestones beyond post-quantum.

What is due when (next 12, 24 or 60 months) · Calendar feed (iCal) of these milestones · Download the tracker as JSON · Quantum standards and guidance · Post-quantum cryptography migration timeline · PQC product readiness and migration navigator

Tracked items by body and status
Body	Published	Draft	In development	Active	Withdrawn	Total
ETSI ISG QKD	10	0	0	1	0	11
ETSI TC CYBER	4	0	0	0	0	4
CEN-CENELEC	5	0	5	1	0	11
ISO/IEC	3	0	1	1	0	5
ITU-T	6	0	0	0	0	6
IEEE	0	0	4	0	5	9
NIST	5	1	2	0	0	8
IETF	7	0	2	0	0	9
EU	1	0	0	1	0	2
ECCG / EUCC	0	1	0	2	0	3
ANSSI	2	0	0	1	0	3
BSI	2	0	0	1	0	3
Netherlands	1	0	0	0	0	1
NCSC-UK	1	0	0	0	0	1
Canada (CCCS, TBS)	1	0	0	1	0	2
NSA	0	0	0	1	0	1

Verification of the items on the date read: Verified: 57; Partly verified: 20; Not verified: 2.

8 items

FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism Standard

Body: National Institute of Standards and Technology (United States)
Kind: Standard
Status: Published (2024-08-13). Final published 2024-08-13 (draft 2023-08-24); planning note 2025-11-17 announces a future update/revision to correct an identified issue, no date given
Scope: Post-quantum cryptography
Jurisdiction: United States
What it means for organisations: Defines ML-KEM, the primary NIST post-quantum key-establishment algorithm that products and protocols are adopting for key exchange.
Next milestone: None stated by the sources read.

Milestones, links, verification and sources

Dated milestones

08/13/24: FIPS 203 (Final): Final standard published

In the portal

Reference record

Products in the navigator

26 reviewed product assertions name an algorithm it specifies: Botan project Botan, Canonical (Ubuntu) Ubuntu, Entrust Entrust nShield HSM (Security World), Fortinet Fortinet FortiOS (FortiGate), Google Google Cloud Key Management Service, Keyfactor (EJBCA) Keyfactor EJBCA, Legion of the Bouncy Castle Bouncy Castle for Java, Microsoft .NET, Microsoft Windows Server, Mozilla Mozilla NSS (Network Security Services), Node.js project (OpenJS Foundation) Node.js, Open Quantum Safe project liboqs (Open Quantum Safe), OpenJDK project OpenJDK (Java SE), OpenSSL Project OpenSSL, PQShield PQShield PQCryptoLib-Core, Red Hat Red Hat Enterprise Linux, Thales Thales Luna Network HSM 7, The Go project Go (crypto/tls and crypto packages), Utimaco Utimaco u.trust General Purpose HSM Se-Series, strongSwan project strongSwan, wolfSSL wolfSSL. Vendor statements, not certification.

Verification

Verified. Status, release date and the 2025-11-17 planning note (future update/revision, errata spreadsheet) read on the CSRC publication page; no revision draft is published and no revision date is stated.

Sources

NIST CSRC: FIPS 203, Module-Lattice-Based Key-Encapsulation Mechanism Standard (read 2026-10-25; Header (date published), document history, planning note 11/17/2025)
NIST CSRC: Federal Information Processing Standards (FIPS) Publications (read 2026-10-25; FIPS 203 row (Final, 8/13/2024))

FIPS 204: Module-Lattice-Based Digital Signature Standard

Body: National Institute of Standards and Technology (United States)
Kind: Standard
Status: Published (2024-08-13). Final published 2024-08-13 (draft 2023-08-24); 2026-07-31 note links an errata list of minor issues to be corrected in a future update/revision, no date given
Scope: Post-quantum cryptography
Jurisdiction: United States
What it means for organisations: Defines ML-DSA, the primary NIST post-quantum digital signature algorithm for certificates, code signing and authentication.
Next milestone: None stated by the sources read.

Milestones, links, verification and sources

Dated milestones

08/13/24: FIPS 204 (Final): Final standard published

In the portal

Reference record

Products in the navigator

28 reviewed product assertions name an algorithm it specifies: Amazon Web Services AWS Key Management Service, Botan project Botan, Canonical (Ubuntu) Ubuntu, Cloudflare Cloudflare network, Entrust Entrust nShield HSM (Security World), GnuTLS project GnuTLS, Google Google Cloud Key Management Service, Keyfactor (EJBCA) Keyfactor EJBCA, Legion of the Bouncy Castle Bouncy Castle for Java, Microsoft .NET, Microsoft Windows Server, Mozilla Mozilla NSS (Network Security Services), Node.js project (OpenJS Foundation) Node.js, Open Quantum Safe project liboqs (Open Quantum Safe), OpenJDK project OpenJDK (Java SE), OpenSSL Project OpenSSL, PQShield PQShield PQCryptoLib-Core, Red Hat Red Hat Enterprise Linux, Securosys Securosys Primus HSM, Thales Thales Luna Network HSM 7, The Go project Go (crypto/tls and crypto packages), Utimaco Utimaco u.trust General Purpose HSM Se-Series, wolfSSL wolfSSL. Vendor statements, not certification.

Verification

Verified. Status, release date and the 2026-07-31 errata/future-revision note read on the CSRC page; no revision draft is published and no revision date is stated.

Sources

NIST CSRC: FIPS 204, Module-Lattice-Based Digital Signature Standard (read 2026-10-25; Header, document history, notes dated 07/31/2026 and 01/31/2025)

FIPS 205: Stateless Hash-Based Digital Signature Standard

Body: National Institute of Standards and Technology (United States)
Kind: Standard
Status: Published (2024-08-13). Final published 2024-08-13 (draft 2023-08-24); no revision notice listed; related draft SP 800-230 (additional SLH-DSA parameter sets) released 2026-04-13
Scope: Post-quantum cryptography
Jurisdiction: United States
What it means for organisations: Defines SLH-DSA, a hash-based signature algorithm offering a conservative alternative to lattice-based signatures.
Next milestone: None stated by the sources read.

Milestones, links, verification and sources

Dated milestones

08/13/24: FIPS 205 (Final): Final standard published

In the portal

Reference record

Products in the navigator

10 reviewed product assertions name an algorithm it specifies: Botan project Botan, Canonical (Ubuntu) Ubuntu, Entrust Entrust nShield HSM (Security World), Google Google Cloud Key Management Service, Legion of the Bouncy Castle Bouncy Castle for Java, Microsoft .NET, OpenSSL Project OpenSSL, Red Hat Red Hat Enterprise Linux, Utimaco Utimaco u.trust General Purpose HSM Se-Series. Vendor statements, not certification.

Verification

Verified. Status and date read on the CSRC page; no planning note or revision listed. SP 800-230 ipd date read on the PQC workshops and timeline page.

Sources

NIST CSRC: FIPS 205, Stateless Hash-Based Digital Signature Standard (read 2026-10-25; Header and document history; related publications (SP 800-230 Draft))
NIST CSRC: Post-Quantum Cryptography - Workshops and Timeline (read 2026-10-25; Timeline entry April 13, 2026 (SP 800-230 ipd))

FIPS 206 (FN-DSA): FN-DSA (based on FALCON)

Body: National Institute of Standards and Technology (United States)
Kind: Specification
Status: In development. No initial public draft published as of 2026-10-25; FALCON listed as 'FIPS coming soon'
Scope: Post-quantum cryptography
Jurisdiction: United States
What it means for organisations: A compact lattice-based signature standard is still pending, so products needing small signatures cannot yet rely on a NIST-final FN-DSA.
Next milestone: None stated by the sources read.

Milestones, links, verification and sources

Verification

Partly verified. Absence of a draft confirmed on three official pages today: FIPS publications list has no FIPS 206 entry, the selected-algorithms page labels FALCON 'FIPS coming soon', and the presumed draft URL csrc.nist.gov/pubs/fips/206/ipd returned 404. The March 2025 NIST news release says the FALCON draft would be released 'shortly as FIPS 206' but gives no date. No comment period exists to report.

Sources

NIST CSRC: Post-Quantum Cryptography - Selected Algorithms (read 2026-10-25; Digital Signature Algorithms, FALCON row ('FIPS coming soon'); page updated August 05, 2026)
NIST CSRC: Federal Information Processing Standards (FIPS) Publications (read 2026-10-25; Full list (13 Final records, no FIPS 206 and no drafts))
NIST: NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption (read 2026-10-25; Paragraph on the fourth standard (FALCON, FIPS 206))

HQC (planned FIPS): HQC selected for standardization (NIST IR 8545 rationale)

Body: National Institute of Standards and Technology (United States)
Kind: Work item or project
Status: In development (2025-03-11). Selected 2025-03-11; draft standard not published as of 2026-10-25 ('FIPS coming soon'); NIST stated a draft in about a year and a final in 2027
Scope: Post-quantum cryptography
Jurisdiction: United States
What it means for organisations: Provides a code-based backup KEM to ML-KEM, but organisations cannot yet implement against a published HQC draft or final standard.
Next milestone: finalized standard expected in 2027: Final HQC standard expected · Expected publication (as the body states) · NIST: NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption (read 2026-10-25; Body text on draft timing, 90-day comment period and 2027 finalization)

Milestones, links, verification and sources

Dated milestones

11 March 2025: HQC selected for standardization
finalized standard expected in 2027: Final HQC standard expected

In the portal

Reference record

Verification

Partly verified. Selection date and 2027 expectation read today. The news release foresaw a draft for public comment 'in about a year' (about March 2026) with a 90-day comment period; no draft is listed on the FIPS publications page, the drafts-open-for-comment page or the selected-algorithms page, and csrc.nist.gov/pubs/fips/207/ipd returned 404. The FIPS 207 number appears only in a 2025 NIST conference presentation found by search, not on a publication page, so no draft date or comment deadline exists to report.

Sources

NIST CSRC: Post-Quantum Cryptography - Workshops and Timeline (read 2026-10-25; Timeline entry March 11, 2025)
NIST CSRC: Post-Quantum Cryptography - Selected Algorithms (read 2026-10-25; Key-Encapsulation Mechanisms, HQC (2025) row ('FIPS coming soon'; NIST IR 8545))
NIST: NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption (read 2026-10-25; Body text on draft timing, 90-day comment period and 2027 finalization)
NIST CSRC: Drafts Open for Comment (read 2026-10-25; Full list (no HQC, FIPS 206 or FIPS 207 entry))

NIST SP 800-227: Recommendations for Key-Encapsulation Mechanisms

Body: National Institute of Standards and Technology (United States)
Kind: Guideline
Status: Published (2025-09-18). Final 2025-09-18 (draft 2025-01-07)
Scope: Post-quantum cryptography
Jurisdiction: United States
What it means for organisations: Gives implementers guidance on using KEMs such as ML-KEM securely, including in hybrid constructions.
Next milestone: None stated by the sources read.

Milestones, links, verification and sources

Dated milestones

09/18/25: SP 800-227 (Final): Final published

In the portal

Reference record

Verification

Verified. Title, final status and date read on the CSRC page.

Sources

NIST CSRC: SP 800-227, Recommendations for Key-Encapsulation Mechanisms (read 2026-10-25; Header and document history)

NIST IR 8547 ipd: Transition to Post-Quantum Cryptography Standards

Body: National Institute of Standards and Technology (United States)
Kind: Migration deadlines
Status: Draft (2024-11-12). Initial public draft released 2024-11-12; comments closed 2025-01-10; still ipd on 2026-10-25 (comments received posted); no final
Scope: Post-quantum cryptography
Jurisdiction: United States
What it means for organisations: Signals that NIST plans to deprecate 112-bit quantum-vulnerable RSA, ECC and DH after 2030 and disallow all of them after 2035, which sets the planning horizon for US federal and FIPS-validated systems. Its 2030 and 2035 dates are proposals of an initial public draft, shown as targets, not as deadlines, until NIST publishes a final version.
Next milestone: Proposed in the draft: deprecated after 2030: Proposed (draft, not final): quantum-vulnerable algorithms at 112-bit strength deprecated (112-bit security strength (RSA, ECDSA, finite-field and EC DH/MQV)) · Target date · NIST: NIST IR 8547 ipd (PDF) (read 2026-10-25; Section 4.1.1 Table 2 (signatures) and Section 4.1.2 Table 4 (key establishment))

Milestones, links, verification and sources

Dated milestones

Comments due 10 January 2025: IPD comment period closed
Proposed in the draft: deprecated after 2030: Proposed (draft, not final): quantum-vulnerable algorithms at 112-bit strength deprecated (112-bit security strength (RSA, ECDSA, finite-field and EC DH/MQV))
Proposed in the draft: disallowed after 2035: Proposed (draft, not final): quantum-vulnerable signature and key-establishment algorithms disallowed (All security strengths (RSA, ECDSA, EdDSA, DH, MQV))

In the portal

Reference record

Verification

Verified. Draft status, release date and comment close read on the CSRC page; 2030/2035 transition dates read in the ipd PDF text (Tables 2 and 4). No final version is listed.

Sources

NIST CSRC: NIST IR 8547 (Initial Public Draft), Transition to Post-Quantum Cryptography Standards (read 2026-10-25; Header (status, release date, comment deadline))
NIST: NIST IR 8547 ipd (PDF) (read 2026-10-25; Section 4.1.1 Table 2 (signatures) and Section 4.1.2 Table 4 (key establishment))

NIST IR 8610: Status Report on the Second Round of the Additional Digital Signature Schemes for the NIST Post-Quantum Cryptography Standardization Process

Body: National Institute of Standards and Technology (United States)
Kind: Technical report
Status: Published (2026-05-14). Final 2026-05-14; nine candidates advanced to round 3 (FAEST, HAWK, MAYO, MQOM, QR-UOV, SDitH, SNOVA, SQIsign, UOV)
Scope: Post-quantum cryptography
Jurisdiction: United States
What it means for organisations: Narrows the additional signature on-ramp to nine round-3 candidates, so further NIST signature standards beyond ML-DSA, SLH-DSA and FN-DSA remain some years away.
Next milestone: None stated by the sources read.

Milestones, links, verification and sources

Dated milestones

05/14/26: IR 8610 (Final): Round 2 status report; round 3 candidates announced

Verification

Verified. Report status, date and round-3 candidate list read on the CSRC page; no round-3 end date is stated.

Sources

NIST CSRC: NIST IR 8610 (read 2026-10-25; Header, document history and abstract)
NIST CSRC: Post-Quantum Cryptography - Workshops and Timeline (read 2026-10-25; Timeline entry May 14, 2026)

Sources compiled 2026-10-27; assembled 2026-11-02. Reviewed every 90 days. Past milestones of the PQC transition are on the migration timeline.