CNSA 2.0 is the NSA's mandatory algorithm framework for US National Security Systems, building on NIST FIPS 203, 204, and 205 but specifying exact parameter sets, ML-KEM-1024, ML-DSA-87, AES-256, SHA-384/512, rather than algorithm families. It carries binding deadlines starting with new system acquisitions in January 2027.

June 16, 202613 min read

Top 10 Countries Leading the Post-Quantum Cryptography Migration in 2026

Q: What is the global deadline for post-quantum cryptography migration?

There is no single global deadline. Most major frameworks converge on a 2030 to 2035 horizon for full migration. NIST anticipates deprecating RSA and ECDSA by 2030 and disallowing them by 2035, a timeline echoed by the UK, Japan, Canada, and the EU. Australia and CNSA 2.0 push for earlier completion of the highest-priority systems.

Q: Do all countries require hybrid cryptography?

No. Germany, France, and the broader EU require or strongly favor hybrid deployments combining classical and post-quantum algorithms. Australia's ASD explicitly does not recommend hybrid approaches and is pushing organizations toward pure post-quantum implementations instead.

Q: How do national PQC mandates affect blockchain infrastructure?

National mandates apply directly to government systems and regulated industries first, but they shape which cryptographic standards become the accepted baseline for institutional capital. A blockchain network that cannot demonstrate alignment with NIST FIPS 203/204/205, and ultimately with stricter regional parameter sets, will face friction attracting the tokenized assets and institutional flows bound by these same frameworks.

Governments do not usually move in step on cybersecurity policy. Post-quantum cryptography is the exception. 2026 is emerging as a clear inflection point across multiple jurisdictions, with regulators moving beyond non-binding guidance toward enforceable expectations expressed through planning, governance, procurement requirements, and supervisory oversight. The legal mechanisms differ wildly from one country to the next, but the direction does not.

How We Ranked This List

Ranking countries by GDP or quantum computing research budget would miss the point entirely. A nation can fund cutting-edge quantum hardware and still have no enforceable plan for migrating its own government systems away from vulnerable encryption. We built a National PQC Mandate Strength Index scoring each country on four factors: whether deadlines are specific calendar dates or vague aspirations, whether named algorithm parameter sets are required versus a general nod to NIST, whether the mandate is legally binding or advisory, and how far enforcement has progressed into actual procurement and audit requirements rather than guidance sitting on a website. Every date below is current as of mid-2026 and worth re-checking against the primary source, since several of these frameworks are still being actively revised.

1. United States

The groundwork was laid in 2022, when the Office of Management and Budget issued Memorandum M-23-02, directing federal agencies to inventory their cryptographic systems and prepare for migration away from quantum-vulnerable algorithms. In 2025, the NSA released CNSA 2.0, and unlike most frameworks on this list, it specifies exact parameter sets rather than algorithm families: ML-KEM-1024 for key establishment and ML-DSA-87 for digital signatures, with AES-256 and SHA-384/512 for symmetric encryption and hashing, while the civilian default of ML-KEM-768 is explicitly not CNSA 2.0 compliant for national-security-adjacent work. The schedule requires new National Security Systems acquisitions to support CNSA 2.0 starting January 2027, with legacy phase-out through 2030 to 2031 and full quantum resistance by 2035. By January 2026, the Cybersecurity and Infrastructure Security Agency had issued federal buying guidance identifying product categories expected to support post-quantum cryptography, moving the mandate from policy into real procurement leverage over the entire federal vendor base.

2. Australia

The Australian Signals Directorate's Information Security Manual calls for a refined PQC transition plan by the end of 2026, the start of critical system migration by the end of 2028, and completion of full migration by the end of 2030, after which traditional asymmetric cryptography, including RSA, Diffie-Hellman, ECDH, and ECDSA, is expected to be retired entirely. The distinctive choice is Australia's rejection of the hybrid approach Europe favors: ASD requires ML-KEM-1024 as the key encapsulation mechanism, with the lighter ML-KEM-768 only acceptable as an interim measure, rather than running classical and post-quantum algorithms side by side indefinitely. That is a harder, less forgiving path technically, but it means Australia is not planning to carry quantum-vulnerable cryptography as a permanent fallback the way some hybrid-mandated jurisdictions effectively are.

3. United Kingdom

The UK's National Cyber Security Centre set three milestones in March 2025: a full cryptographic discovery exercise and migration plan by 2028, execution of the highest-priority upgrades from 2028 to 2031, and completion of migration across all systems and services by 2035. NCSC's recommended algorithms, ML-KEM-768 and ML-DSA-65, are deliberately less stringent than the US CNSA 2.0 parameter sets, a real tension for any organization operating in both markets. NCSC has also launched a pilot under its Assured Cyber Security Consultancy scheme to qualify outside consultancies to deliver PQC discovery and migration planning, an attempt to scale expert capacity ahead of the 2028 deadline rather than leaving every organization to figure out cryptographic inventory alone.

4. Canada

Under ITSM.40.001, issued by the Canadian Centre for Cyber Security in June 2025, federal departments were required to submit initial PQC transition plans by April 2026, report progress annually thereafter, complete migration of high-priority systems by the end of 2031, and transition remaining systems by the end of 2035. That April 2026 deadline marked the first concrete sovereign PQC deadline enforced in any G7 nation, and every federal department was required to designate a senior official accountable for the migration. The requirement technically covers only federal non-classified systems, but it is already reshaping expectations for the cloud providers and suppliers sitting inside that procurement chain.

5. Germany

Germany's updated BSI Technical Guideline TR-02102-1, refreshed in January 2026, sets full migration to quantum-safe cryptography by 2030 for critical infrastructure under NIS2 and KRITIS regulation, and by 2032 for all other organizations. BSI uniquely requires hybrid schemes combining classical and post-quantum algorithms for both key establishment and signatures, with an approved list including ML-KEM alongside the more conservative FrodoKEM and Classic McEliece as fallbacks. BSI's own 2025 threat assessment shortened its estimated horizon for a cryptographically relevant quantum computer from roughly 20 years to just 10 to 15, which matters because a joint BSI and KPMG market survey found that fewer than 5 percent of German organizations currently have a formal migration plan in place.

6. France

France's ANSSI runs the most direct procurement weapon of any agency on this list. Its three-phase model starts with hybrid deployments as defense-in-depth, moves to hybrid schemes with full post-quantum assurance from 2025, and will eventually shift to pure PQC where appropriate. The decisive lever is the Visa de sécurité: from 2027, ANSSI will no longer certify products for its security visa unless they incorporate post-quantum cryptography, effectively forcing vendors selling into the French market to migrate ahead of the EU's broader 2030 timeline. Banque de France has been running practical PQC experiments since 2022, including a November 2024 cross-continental trial with the Monetary Authority of Singapore that tested quantum-resistant algorithms for email signing and cross-border payment infrastructure.

7. Singapore

In October 2025, Singapore's Cyber Security Agency, working with GovTech and IMDA, released a Quantum-Safe Handbook and a Quantum Readiness Index to help organizations self-assess before any formal mandate lands. In March 2026, the Senior Minister of State for Digital Development and Information confirmed that post-quantum cryptography will be Singapore's mainstream quantum-safe migration path, using NIST standards as the baseline. Singtel has separately launched Southeast Asia's first Hybrid Quantum-Safe Network, integrating quantum key distribution with post-quantum cryptography, and the Monetary Authority of Singapore has been an early mover on cross-border financial-sector PQC trials alongside Banque de France, putting its banking sector ahead of where most formal regulation currently requires it to be.

8. India

India's Department of Science and Technology, under the National Quantum Mission, published a comprehensive national roadmap in February 2026 called Implementation of Quantum Safe Ecosystem in India, proposing a tiered approach with Critical Information Infrastructure targeted for migration by 2028 to 2029, broader enterprise adoption by 2033, and a Cryptographic Bill of Materials inventory required from all in-scope organizations by December 2026. The framework introduces a three-tier national laboratory system for PQC product testing and certification, aligned with ISO/IEC 17025, with designation authority shared between the Telecom Engineering Centre, the Bureau of Indian Standards, and the Ministry of Electronics and Information Technology, explicitly reducing dependence on foreign validation. The Department of Telecommunications is expected to mandate PQC readiness for new telecom equipment procured from 2026 onward, a requirement with outsized reach given the scale of India's 5G rollout.

9. Japan

Japan's National Cyber Command Office confirmed in a late 2025 interim report that government agencies must transition to post-quantum cryptography by 2035, aligning Japan's horizon with the US, EU, UK, and Canada. The pivotal recent milestone came in April 2026, when an external evaluation of ML-KEM for CRYPTREC, Japan's cryptographic standards body, was completed and added to the CRYPTREC Ciphers List, the country's equivalent of the US CNSA suite. A formal national roadmap is expected by May 2027, meaning Japan's technical approval is running ahead of its own published policy timeline.

10. United Arab Emirates

The UAE has the earliest hard deadline of any country on this list, even though its mandate currently covers a narrower scope than the others. In 2025, the UAE approved a National Encryption Policy requiring government entities to develop officially approved transition plans built on cryptographic discovery and inventory as prerequisites. By 2026, compliance-critical entities must formalize migration plans and prioritize higher-risk systems, arriving years before Australia's, the UK's, or the EU's full migration targets even begin. The UAE Cyber Security Council has paired the policy with delivery, partnering with the Advanced Technology Research Council to scale cryptographic discovery tooling, national cryptographic libraries built by the Technology Innovation Institute, and entanglement-based quantum key distribution across government and enterprise environments.

What This Means Going Forward

Look across these ten frameworks and a pattern emerges. Every major economy has committed to a 2030 to 2035 horizon for full migration. The real argument left is about how fast the early milestones should land and whether hybrid cryptography is a sensible bridge or just delayed risk. The countries ranked highest here, the US, Australia, the UK, and Canada, share one trait: they converted guidance into a dated, named, accountable obligation rather than leaving migration as a recommendation. The countries lower on this list are not behind on ambition. India's sovereign certification infrastructure and Singapore's financial-sector trials are arguably more advanced in places than anything built domestically in the US. They simply have not yet converted that ambition into the kind of binding, parameter-specific mandate the top four already enforce.

For any organization building or choosing blockchain infrastructure, this regulatory map is not background reading. A network that cannot demonstrate alignment with CNSA 2.0's named parameter sets or ASD's pure-PQC requirement will eventually be locked out of government and regulated-sector capital, regardless of how good its marketing is. Infrastructure built natively around the finalized NIST FIPS 203, 204, and 205 suite, with the crypto-agility to adapt as individual countries tighten their own parameter requirements, sits in a fundamentally different compliance position than a retrofit bolted onto a classical chain after the fact. See how QubitChain.io's architecture maps to these standards.

Frequently Asked Questions

Q: Which country has the strictest post-quantum cryptography mandate?

A: The United States, through CNSA 2.0, has the most prescriptive mandate in named algorithm terms, with binding 2027 procurement deadlines. Australia's ASD mandate is arguably stricter in spirit since it rejects hybrid cryptography entirely and requires full retirement of classical algorithms by 2030.

Q: What is the global deadline for post-quantum cryptography migration?

A: There is no single global deadline, but most frameworks converge on a 2030 to 2035 horizon for full migration, echoed by NIST, the UK, Japan, Canada, and the EU.

Q: Do all countries require hybrid cryptography?

A: No. Germany, France, and the EU favor hybrid deployments. Australia explicitly rejects hybrid and pushes pure post-quantum implementations instead.

Q: What is CNSA 2.0?

A: The NSA's mandatory algorithm framework for US National Security Systems, specifying exact parameter sets, ML-KEM-1024 and ML-DSA-87, with binding deadlines starting January 2027.

Q: How do national PQC mandates affect blockchain infrastructure?

A: They set the compliance baseline regulated capital will eventually require. A blockchain that cannot demonstrate alignment with NIST FIPS 203/204/205 and stricter regional parameter sets will face friction attracting institutional and government-adjacent flows.

Reference Links

post-quantum cryptography by countryPQC migrationquantum safe migrationpost quantum mandateNIST PQCCNSA 2.0quantum cryptography lawnational quantum strategyPQC compliancecountries leading post quantum cryptography migrationpost quantum cryptography deadlines by country 2026which countries have post quantum cryptography mandatesnational post quantum cryptography roadmap 2026CNSA 2.0 vs UK NCSC PQC timelinepost quantum cryptography government regulations 2026quantum safe migration deadline by countrypost quantum cryptography compliance by jurisdictionASD pure PQC mandate AustraliaIndia National Quantum Mission PQC roadmap