When does NIST plan to deprecate classical cryptographic algorithms?

According to NIST IR 8547, classical algorithms like RSA, ECDSA, and ECDH will be deprecated by 2030 and fully disallowed by 2035. Organizations should begin planning their migration now to meet these deadlines.

Which country has the most aggressive PQC migration deadline?

France has one of the most aggressive timelines — ANSSI requires PQC support in qualified products by 2025. The CNSA 2.0 Suite requires US national security systems to adopt ML-KEM and ML-DSA by 2025, with all classical algorithms disallowed by 2033.

What is the EU's coordinated PQC transition plan?

EU Recommendation 2024/1101 calls on all member states to develop coordinated PQC migration plans. Combined with DORA (financial sector), NIS2 (critical infrastructure), and eIDAS 2.0 (digital identity), the EU is building a comprehensive quantum-readiness regulatory framework.

PQC Migration Timeline — Global Deadlines & Milestones

Global Migration Timeline

Compare Post-Quantum Cryptography migration roadmaps across nations. Track phases from discovery to full migration and key regulatory milestones.

timeline_04062026.csv • Updated: 4/6/2026

Search:

Post-quantum cryptography migration timeline by country and phase
Country	Organization	<2024	2025	2026	2027	2028	2029	2030	2031	2032	2033	2034	2035
Australia	ASD




BH Bahrain	NCSC
Canada	ISED








China	CACR


Czech Republic	NUKIB


European Union	EU Horizon








France	ANSSI







G7	G7 CEG
G7	G7 CEG
Germany	BSI









Global	IBM









HK Hong Kong	LegCo




India	TEC



International	BIS



Israel	INCD




Italy	ACN
Japan	CRYPTREC






JO Jordan	CBJ
Malaysia	NACSA
Malaysia	NACSA
NATO	NATO
New Zealand	GCSB/NCSC


SA Saudi Arabia	NCA


Singapore	CSA/MAS




South Korea	NIS/KISA


Spain	CCN
Spain	CCN
Taiwan	MODA
Taiwan	MODA
AE United Arab Emirates	TII




United Kingdom	NCSC





United States	SandboxAQ















United States (CNSA)	NSA