In short: Every standard and PQC deadline with its status and next milestone. Filter by body, kind or status; each item shows its key facts first and folds its milestones and sources. Filter the tracker
Information only, not compliance or legal advice. Each status, date and deadline is as its official source states it on the date read; check the publisher for the authoritative current version. A milestone that is not verified is never used in the deadlines view, the feed, the early warning or the briefings.
Standards, specifications, committees and migration deadlines on post-quantum cryptography, quantum key distribution and quantum technologies: ETSI, CEN-CENELEC, ISO/IEC, ITU-T, IEEE, NIST and the IETF, the EU roadmap and the national agencies, each with its status and dates, its scope, what it means for organisations and its next milestone.
This page: every standard, committee and deadline with its status and next milestone. The other post-quantum pages: Guide: what post-quantum cryptography is and what to do first; Timeline by authority: the milestones of each EU and national authority, as its source states them; What is due when: everything due in the next 12 to 60 months, in date order, with a calendar feed; Compliance calendar: dated obligations and milestones beyond post-quantum.
Verification of the items on the date read: Verified: 57; Partly verified: 20; Not verified: 2.
1 item
CNSA 2.0: Announcing the Commercial National Security Algorithm Suite 2.0
Body
National Security Agency (United States)
Kind
Migration deadlines
Status
Active. Official documents could not be read today (HTTP 403 from media.defense.gov and nsa.gov)
Scope
Post-quantum cryptography
Jurisdiction
United States
What it means for organisations
Would set per-category years by which US National Security Systems support, prefer and then exclusively use quantum-resistant CNSA 2.0 algorithms.
Next milestone
None stated by the sources read.
Milestones, links, verification and sources
Verification
Not verified. All official URLs returned HTTP 403 to WebFetch and curl today: CSA PDF (2022 and May 2025 versions on media.defense.gov), CNSA 2.0 FAQ (v2.2 and earlier), NSA PQC resource hub and NSA press release on nsa.gov, and the CSfC PQC addendum. No per-category 'support and prefer by' / 'exclusively use by' years, the 2035 NSM-10 goal, or the CNSSP 15 / 1 January 2027 acquisition requirement could be read on an official page, so no milestones are recorded. Search-engine snippets (unverified, not used) mentioned 2025/2030 for software and firmware signing, 2027/2033 for operating systems, 2033 for custom and legacy equipment, 1 January 2027 for new NSS acquisitions, and 2035 overall; these need re-checking from a network that can reach media.defense.gov. Tried again on 27 October 2026: both media.defense.gov PDFs still answered HTTP 403, so CNSA 2.0 stays not verified and no date is shown; an editor reading the advisory in a normal browser can add the milestones with their page locator.