Post-Quantum Cryptography (PQC) PortalThe encryption protecting the internet has an expiry date.
Large quantum computers would break the public-key cryptography behind HTTPS, VPNs and digital signatures. Post-quantum cryptography is the replacement, and the migration has already started.
Your connection to this siteChecking…Details →- NIST PQC standards final since Aug 2024: FIPS 203, 204, 205
- 3
- NIST PQC standards final since Aug 2024: FIPS 203, 204, 205
- NIST's proposed date to disallow quantum-vulnerable algorithms (draft IR 8547)
- 2035
- NIST's proposed date to disallow quantum-vulnerable algorithms (draft IR 8547)
- NSA CNSA 2.0 transition target for US national security systems
- 2031
- NSA CNSA 2.0 transition target for US national security systems
What you can do here
Everything for post-quantum readiness, in one place
Post-quantum TLS checker
Instantly see whether your browser negotiated a post-quantum hybrid key exchange (X25519MLKEM768) with this site.
PQC standards tracker
Status, dates and sources for NIST FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), FIPS 205 (SLH-DSA), FN-DSA, HQC, IETF RFCs and NSA CNSA 2.0, with the last-checked time on every entry.
Learn PQC step by step
Four short lessons with interactive demos, from qubits and Shor's algorithm to lattices and migration.
ML-KEM & ML-DSA playground
Generate keys, encapsulate, sign and verify in your browser, and compare sizes with RSA and ECDSA. Nothing leaves your device.
PQC news & deadlines
Curated links to post-quantum news: government deadlines, regulator guidance, new standards and research.
Free, private, bilingual
No accounts, no cookies, no trackers. Everything is available in English and Thai.
Latest
PQC News
FAQ
Common questions
What is post-quantum cryptography (PQC)?
Public-key cryptography designed to stay secure against quantum computers while running on ordinary hardware. NIST published the first standards, ML-KEM (FIPS 203), ML-DSA (FIPS 204) and SLH-DSA (FIPS 205), in August 2024.
Can quantum computers break RSA and elliptic-curve cryptography?
A large, fault-tolerant quantum computer running Shor's algorithm could. None exists today, but estimates keep falling: from about 20 million noisy qubits for RSA-2048 (2019) to under one million (2025).
What is "harvest now, decrypt later"?
Recording encrypted traffic today to decrypt it once a quantum computer exists. It makes post-quantum key exchange urgent for any data that must stay secret for years.
How do I check if my connection is quantum-safe?
Open the PQC checker. It reads which key exchange your browser negotiated with this site; X25519MLKEM768 means post-quantum hybrid protection.
When do organisations need to migrate to PQC?
It depends on the jurisdiction. The EU roadmap targets high-risk systems by end-2030, US federal agencies face 2030–2031 under EO 14412, and NIST proposes disallowing quantum-vulnerable algorithms by 2035 (draft IR 8547).