Standardization, Compliance and Certification

Explore the three pillars of PQC compliance: standardization bodies that define the algorithms, certification bodies that validate implementations, and compliance frameworks that mandate adoption.

17Entries
16Require PQC
2Explicit Deadlines

OSCCA NGCC Program

HighRequires PQCSCA/OSCCA
2027-2030 (estimated)

China Next-Generation Commercial Cryptographic algorithms standardization program

CN
Gov/DefFinanceTechTelecom

KpqC Standardization

AuthoritativeRequires PQCKISA/NIS/MSIT
2035 (full migration)

Korea Post-Quantum Cryptography standardization program with national PQC transition roadmap

KR
Gov/DefTelecomFinanceTech

3GPP Security Working Group

HighRequires PQC3GPP
Ongoing

3GPP SA3 — global mobile network security standards working group studying PQC integration

Global
Telecom
Site1 ref

ANSSI

AuthoritativeRequires PQCANSSI
Ongoing

Agence nationale de la sécurité des systèmes d'information — France's national cybersecurity authority

FR
Gov/DefTech

BSI

AuthoritativeRequires PQCBSI
Ongoing

German Federal Office for Information Security — Europe's most detailed national PQC technical guidance authority

DE
Gov/DefTech

CRYPTREC

AuthoritativeRequires PQCCRYPTREC
Ongoing

Cryptography Research and Evaluation Committees — Japan's government body evaluating cryptographic techniques for public and government use

JP
Gov/DefTech

ENISA

AuthoritativeRequires PQCENISA
Ongoing

European Union Agency for Cybersecurity — EU's PQC guidance authority and EUCC scheme co-manager

EU
Gov/DefTechFinance

ETSI

AuthoritativeRequires PQCETSI
Ongoing

European Telecommunications Standards Institute — global standards body for telecoms PQC including quantum-safe algorithm suites for 5G/6G

Global
TelecomTechGov/Def

IETF

AuthoritativeRequires PQCIETF
Ongoing

Internet Engineering Task Force — open standards body integrating PQC algorithms into internet protocols (TLS, SSH, CMS, S/MIME)

Global
TechTelecomFinance
Site5 refs

ISO/IEC JTC 1/SC 27

AuthoritativeRequires PQCISO/IEC
Ongoing

ISO/IEC Joint Technical Committee 1, Subcommittee 27 — international body standardizing PQC algorithms for global adoption

Global
Gov/DefTechFinanceHealth
Site2 refs

ITU-T SG17

ModerateRequires PQCITU-T
Ongoing

ITU Telecommunication Standardization Sector Study Group 17 on security standards for global telecom PQC transition

Global
Telecom
Site

KISA / NIS

AuthoritativeRequires PQCKISA/NIS
Ongoing

Korea Internet & Security Agency and National Intelligence Service — South Korea's cybersecurity and cryptography standardization authorities

KR
Gov/DefTechTelecom

NIST

AuthoritativeRequires PQCNIST
Ongoing

National Institute of Standards and Technology — US federal agency that standardized the first PQC algorithms

US
Gov/DefFinanceTechHealthEnergy

NSA

AuthoritativeRequires PQCNSA
Ongoing

US National Security Agency — mandates PQC for all national security systems via CNSA 2.0 with the most aggressive government timeline

US
Gov/Def

OSCCA / SCA

AuthoritativeRequires PQCSCA/OSCCA
Ongoing

Office of State Commercial Cryptography Administration (国家密码管理局) — China's regulatory authority for commercial cryptography

CN
Gov/DefFinanceTech

PKI Consortium

ModerateRequires PQCPKI Consortium
Ongoing

Industry consortium coordinating PQC readiness for PKI operators and certificate authorities

Global
TechFinance
Site1 ref

Cloud Security Alliance

ModerateNo PQC mandate yetCSA
Ongoing

Cloud Security Alliance Quantum-Safe Working Group developing quantum security controls for cloud environments

Global
Tech
Site