EU Coordinated Implementation Roadmap for PQC
Direct answerThe EU's coordinated roadmap, published 2025-06-23, asks all member states to start transitioning by the end of 2026, to secure high-risk systems and critical infrastructure with post-quantum cryptography by the end of 2030, and to complete the transition for all systems by 2035.
- Issued by
- European Commission / NIS Cooperation Group, with ENISA
- Date
- 2025-06-23
- Status
- Adopted
- Source
- https://digital-strategy.ec.europa.eu/en/library/coordinated-implementation-roadmap-transition-post-quantum-cryptography
Milestones
- 2026-12-31National PQC transition roadmaps published and first steps taken
- 2030-12-31High-risk use cases and critical infrastructure migrated
- 2035-12-31Full transition for all systems
Notes
- Member-state agencies BSI (Germany) and ANSSI (France) additionally recommend hybrid schemes and, in some cases, FrodoKEM and Classic McEliece.
Algorithms this timeline points to
ML-KEM, ML-DSA, SLH-DSA, FN-DSA, HQC, LMS / HSS, XMSS / XMSS^MT
Who can help you meet it
Cryptography audit firms listed on this index: zkSecurity, Trail of Bits, NCC Group (Cryptography Services), Cryspen, Kudelski Security, Quarkslab, Least Authority, Galois, atsec information security, Riscure (Keysight), Cure53, X41 D-Sec. See the audit checklist for what a migration review covers.