Post-quantum readiness
Quantum computers could break the encryption the internet relies on. The migration starts now.
Clear answers on post-quantum cryptography risks, the deadlines that apply to you, and practical steps to become quantum safe.
The clock that matters
Migration takes years, so national agencies have set dates well before a quantum computer is expected.
Now
Harvest-now-decrypt-later attacks already put long-lived data at risk.
2028
UK NCSC: finish discovery and have a migration plan.
2030
NIST deprecates RSA and ECC. EU: high-risk systems migrated.
2031
UK NCSC: highest-priority systems migrated.
2035
UK, EU and US targets: migration complete.
Start with the essentials
What's at risk
RSA, Diffie-Hellman and elliptic-curve crypto — the backbone of TLS, VPNs, SSH and signatures.
The new standards
ML-KEM, ML-DSA and SLH-DSA are final. FN-DSA and HQC are on the way.
Where to start
Inventory, prioritise, move to TLS 1.3 with post-quantum key exchange, and build crypto-agility.