Q-Day readiness tracker
Post-quantum migration milestones in one place: the NIST standards, the US, EU and UK deadlines, the UAE policy, and post-quantum support in browsers and operating systems, each linked to its primary source.
19 milestones, 10 still ahead as of 5 November 2026. Each row links to the standard, government document or vendor page it comes from, and says only what that source says. "Done" marks a published standard or shipped support; "Passed" and "Ahead" are deadlines. Where a government plan gives a year without a day, the row sorts at the end of that year. For what Q-Day means and why to start now, see Q-Day Watch.
| Milestone (area) | When | Status | What it means | Source |
|---|---|---|---|---|
| FIPS 203: ML-KEM publishedStandards | 13 August 2024 | Done | NIST's standard for post-quantum key encapsulation (key exchange), based on CRYSTALS-Kyber. | NIST CSRC, FIPS 203 |
| FIPS 204: ML-DSA publishedStandards | 13 August 2024 | Done | NIST's main post-quantum digital signature standard, based on CRYSTALS-Dilithium. | NIST CSRC, FIPS 204 |
| FIPS 205: SLH-DSA publishedStandards | 13 August 2024 | Done | NIST's stateless hash-based digital signature standard, based on SPHINCS+. | NIST CSRC, FIPS 205 |
| Chrome switches from Kyber to hybrid ML-KEMBrowsers and operating systems | Chrome 131 (announced 13 September 2024) | Done | Chrome offers hybrid ML-KEM key exchange in TLS, replacing the earlier pre-standard Kyber. | Google Online Security Blog |
| HQC selected as a fifth algorithmStandards | 11 March 2025 | Done | A backup key-encapsulation method to ML-KEM, on different maths. NIST said a draft standard would follow in about a year and the final standard is expected in 2027. | NIST news release |
| Windows: ML-KEM and ML-DSA generally availableBrowsers and operating systems | 18 November 2025 | Done | Available to developers in Windows Server 2025 and Windows 11 (24H2, 25H2) through the CNG libraries, and in .NET 10. | Microsoft Security Community Blog |
| Apple: hybrid quantum-secure TLS by defaultBrowsers and operating systems | iOS 26, iPadOS 26, macOS Tahoe 26, visionOS 26 | Done | TLS 1.3 connections automatically offer hybrid quantum-secure key exchange (X25519MLKEM768). Apple's page explains how to check your servers. | Apple Support |
| National Encryption Policy covers post-quantum cryptographyUnited Arab Emirates | In force (portal page updated 2 July 2026) | Done | The Cyber Security Council's policy mandates encryption for data at rest and in motion, and sets requirements for key management, post-quantum cryptography, implementation and ongoing performance monitoring. The official portal gives no migration dates. | UAE Government portal (u.ae) |
| NIST IR 8547 final: the transition planStandards | October 2026 | Done | NIST's plan for retiring RSA, elliptic-curve and other quantum-vulnerable public-key algorithms (see the 2030 and 2035 rows). | NIST CSRC, IR 8547 |
| EU roadmap: Member States start the transitionEuropean Union | By the end of 2026 | Ahead | From the coordinated roadmap the Member States issued with the Commission on 23 June 2025. | European Commission press release, 23 June 2025 |
| NCSC: discovery and migration planUnited Kingdom | By 2028 | Ahead | Define migration goals, find every service that depends on cryptography, and build an initial plan (NCSC guidance of 20 March 2025). | NCSC, PQC migration timelines |
| Federal agencies support TLS 1.3United States | By 2 January 2030 | Ahead | Required by Executive Order 14306 and OMB Memorandum M-26-15, as NIST IR 8547 reports, to ease the move to post-quantum TLS. | NIST IR 8547 (PDF) |
| EU roadmap: critical infrastructure on post-quantum cryptographyEuropean Union | As soon as possible, by the end of 2030 | Ahead | Protection of critical infrastructures should move to post-quantum cryptography no later than the end of 2030. | European Commission press release, 23 June 2025 |
| RSA, ECDSA, EdDSA, DH and ECDH deprecatedStandards | After 2030 | Ahead | Deprecated in NIST standards: still allowed, but with some security risk that the data owner must weigh. The 2030 to 2035 window is for lower-risk and legacy systems. | NIST IR 8547 (PDF) |
| Most sensitive federal systems: post-quantum key establishmentUnited States | By 31 December 2030 | Ahead | High value assets and high-impact systems must use post-quantum key establishment (OMB M-26-15, as NIST IR 8547 reports). | NIST IR 8547 (PDF) |
| NCSC: highest-priority migrations doneUnited Kingdom | By 2031 | Ahead | Carry out the early, highest-priority migrations and refine the plan into a full roadmap. | NCSC, PQC migration timelines |
| Most sensitive federal systems: post-quantum signaturesUnited States | By 31 December 2031 | Ahead | The same systems must use post-quantum digital signatures (OMB M-26-15, as NIST IR 8547 reports). | NIST IR 8547 (PDF) |
| Quantum-vulnerable public-key algorithms disallowedStandards | After 2035 | Ahead | No longer allowed under NIST standards and guidelines. National Security Memorandum 10 also sets 2035 as the target for finishing the US federal migration. | NIST IR 8547 (PDF) |
| NCSC: migration completeUnited Kingdom | By 2035 | Ahead | Complete migration of all systems, services and products, with a small tail of rarely used technologies that may take longer. | NCSC, PQC migration timelines |
Not listed yet, because we could not open the primary source when this page was built: the US National Security Agency's CNSA 2.0 dates for national security systems, Firefox's support, and any deadlines in the full text of the UAE National Encryption Policy (published by the UAE Cyber Security Council).