Newsroom
Post-quantum news from around the web, curated. Headlines link straight to the original publisher; the summaries are ours.
Top story
PolicyThe Quantum Insider
BMI, BMDS and BSI jointly issued Germany's implementation guideline for the EU PQC roadmap, recommending high-risk systems finish migrating by end-2030 and the wider transition be largely done by 2035.
ThreatsNortheast Times
Europol's Cybercrime Centre says wallets whose public keys are already visible on-chain are the primary point of exposure, while Bitcoin's SHA-256 hashing is considered largely quantum-resistant.
ThreatsEuropol
Produced with Universidad Carlos III de Madrid, the report looks at exposure in TLS, SSH and OpenPGP, rates governments as high risk, and found no clear evidence of large-scale harvesting yet.
PolicyeWeek
The public version of GAO-27-108740 found gaps in cryptographic inventories, cost estimates and algorithm testing across all CFO Act agencies, weeks before migration plans are due to OMB.
PolicyCMS
Guidance 05/2026, based on a survey of 60 institutions, sets the expectation that supervised firms have a post-quantum roadmap in place by mid-2027 at the latest.
PolicyCloudflare Blog
EO 14412, signed 22 June 2026, sets post-quantum key establishment for the most sensitive federal systems by end-2030 and signatures by end-2031, ahead of the earlier 2035 target.
PolicyRegulation Asia
The phased reference guide names 'harvest now, decrypt later' and 'trust now, forge later' risks and lists priorities including a cryptographic bill of materials and crypto-agility.
CertificatesLet's Encrypt
The CA plans a staging environment in late 2026 and production in 2027, while still tracking ML-DSA X.509 certificates. Existing certificates are unaffected.
IndustryCloudflare Docs
New Radar data shows how much traffic, including connections to origin servers, is already protected by post-quantum key exchange.
PolicyBanca d'Italia
The non-binding roadmap suggests migrating critical systems in the 2030–2032 window and completing non-critical systems by around 2035.
CertificatesCloudflare Blog
The experiment tests whether quantum-ready certificates can scale without slowing handshakes or changing WebPKI trust relationships.
StandardsNIST
The final guidance explains how to use KEMs such as ML-KEM securely in protocols, replacing the initial public draft from January 2025.
PolicyEuropean Commission
Developed by the NIS Cooperation Group, the roadmap asks member states to start the transition by end-2026, finish high-risk use cases by end-2030 and as much as feasible by 2035.
ResearchThe Quantum Insider
Craig Gidney's new estimate cuts the 2019 figure of about 20 million qubits to fewer than one million, running for under a week, under the same hardware assumptions.
StandardsNIST
HQC, based on error-correcting codes, will back up ML-KEM with different math. NIST plans a draft standard for public comment, then a final version.