Curated updates on PQC standards, regulatory timelines, and quantum technology milestones. Structured intelligence for decision-makers.
ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) finalized for immediate adoption. NIST states these "can and should be put into use now." Organizations should begin cryptographic inventory and migration planning immediately. The standards cover key establishment and digital signatures — the foundation of enterprise PKI, TLS, and code-signing infrastructure.
CNSA 2.0 timelines established for national security systems. NSA does not recommend QKD for National Security Systems due to hardware and integration limitations. Updated guidance reinforces PQC as the cost-effective, maintainable path. CNSA 2.0 mandates set clear deadlines through 2033 for all government and defense systems. Commercial equivalents expected across Five Eyes partners.
Booz Allen, Palo Alto Networks, and other major vendors post dedicated PQC roles as cryptographic inventory becomes a formal product category with dedicated budget. Roles span cryptographic inventory, migration architecture, PKI/TLS readiness, vendor assessment, and executive risk reporting. This signals real budget allocation — not exploratory research — across regulated sectors.
Three-class framework helps enterprises evaluate when quantum networking is relevant vs. premature, covering QKD, networked sensors, and entanglement distribution. Helps buyers avoid over-investing before technology matures for their use case.
Google, Cloudflare, Apple, and Facebook have deployed PQC key exchange (X25519MLKEM768 and MLKEM1024). Microsoft, Amazon, Netflix, and GitHub have not. Certificate identity migration has not started for any major service — the "certificate identity gap" is universal. Cloudflare reports ~38% of global TLS traffic supports quantum-resistant encryption.
12 open-source scanners, 5 delivery tiers from self-service to air-gapped appliance. AI-driven analysis delivers quantum readiness assessments in days, not weeks. NIST-aligned, CNSA 2.0 compliant. Launching Q3 2026. Early access available for select partners.
GB/T 47177.1-2026 establishes a unified framework for cloud-based quantum computing services. China is also developing independent PQC standards with a global call for algorithm proposals, focusing on "structureless lattice" approaches distinct from NIST. Organizations with China operations or supply chains should monitor this divergence.