Post-quantum migration deadline checker

How we calculated this

NIST published FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) in August 2024. Source: https://csrc.nist.gov/projects/post-quantum-cryptography fetched 2026-11-01.

NSA CNSA 2.0 (advisory September 2022; FAQ V2.1 December 2024) requires ML-KEM-1024 and ML-DSA-87 for National Security Systems. New acquisitions must support CNSA 2.0 from January 1, 2027; non-supporting equipment phases out by December 31, 2030; it is mandatory December 31, 2031. LMS and XMSS (single-tree, NIST SP 800-208) are the approved schemes for software and firmware signing: support and prefer from 2025, exclusively by 2030. SLH-DSA is not approved for NSS. Source: https://media.defense.gov/2022/Sep/07/2003071836/-1/-1/1/CSI_CNSA_2.0_FAQ_.PDF fetched 2026-11-01.

OMB M-26-15 (June 24, 2026) directs federal civilian agencies: a PQC Migration Plan to OMB and ONCD within 120 days (due October 22, 2026) and mitigation of as much quantum risk as feasible by December 31, 2030. It does not apply to National Security Systems. It follows the earlier inventory order OMB M-23-02 (November 2022). Source: https://www.whitehouse.gov/wp-content/uploads/2026/06/M-26-15-Execution-of-the-Migration-to-Post-Quantum-Cryptography.pdf fetched 2026-11-01.

NIST IR 8547 (final, October 2026) describes the transition approach. NSM-10 sets 2035 as the federal migration target, and the June 2026 executive order requires federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures. Source: https://csrc.nist.gov/pubs/ir/8547/final fetched 2026-11-01.

Harvest now, decrypt later: recorded traffic can be decrypted later by a capable quantum computer, so data needing over 15 years of confidentiality should migrate first.

The systems list only tailors advice. It changes which outcome explains firmware and signing duties; it does not change which mandate applies.

Method checked on 2026-11-01.

For planning only. Not legal or compliance advice. Confirm requirements with your counsel, CISO and the relevant authorities. Deadlines can change.

Questions

Which algorithms do I migrate to?

ML-KEM (FIPS 203) for key establishment and ML-DSA (FIPS 204) for signatures. SLH-DSA (FIPS 205) covers stateless hash-based signatures. NSS add LMS/XMSS for firmware signing now and exclude SLH-DSA.

What is the earliest hard date?

The OMB M-26-15 migration plan was due October 22, 2026 for federal civilian agencies. The next is the CNSA 2.0 acquisition gate: new NSS purchases must support CNSA 2.0 from January 1, 2027.

Does any of this apply outside the US?

These are US mandates. Other states run their own tracks (for example Germany's BSI guidance), but NIST standards are the technical reference most vendors build to.

What if my organization type is not listed?

Pick the closest match. The outcome tells you which document governs the strictest version of the rules; your counsel can map your exact obligations from it.

Find quantum companies

• Post-quantum cryptography vendors