NIST published FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) in August 2024. NIST IR 8547, finalised on 27 October 2026, sets deprecation of RSA, ECDSA, EdDSA and Diffie-Hellman after 2030 and disallowance after 2035. Executive Order 14412, signed on 22 June 2026, and OMB Memorandum M-26-15 direct federal agencies to prioritise migration of high-value assets and high-impact systems.

NIST selected HQC as the backup KEM for post-quantum cryptography, built on code-based mathematics independent of lattices. Plan for substitution now.

Singapore extends its quantum-safe timeline beyond CII. Germany publishes EU PQC roadmap guideline. Three IETF PQC drafts advance toward RFC publication.

PQC Governance Digest: Cut-off 9 October 2026 The US Government Accountability Office has put a number on federal PQC readiness: none of 24 major agencies had fully carried out three initial steps, namely inventory, funding and testing. Europol told organisations not to wait for certainty on quantum timing, and Microsoft and the IETF moved certificate infrastructure forward. Four signals cleared verification. Four regions returned null. 1. United States: GAO Sets the Federal

BSI Pulls Back on Classic McEliece as NSA Restates PQC Deadlines A national cryptographic authority has told its constituency to stop building new systems on a post-quantum algorithm that, according to industry reporting, an international standard added only four months ago. On 1 October, Germany's BSI advised that Classic McEliece should not be used for new developments after cryptanalytic advances lowered its assessed security level. The same day, the NSA restated that new

𝐈𝐍𝐓𝐄𝐋𝐋𝐈𝐆𝐄𝐍𝐂𝐄 𝐁𝐑𝐈𝐄𝐅 ISO/IEC 18033-2:2006/Amd 2:2026 has published. Three post-quantum KEMs now sit inside one of the principal international standards for asymmetric encryption: ML-KEM, Classic McEliece and FrodoKEM. Read that again. Not one algorithm. Three. From three different mathematical families. Why this matters before the detail. A standards body had a choice. It could have ratified the market's preferred answer, ML-KEM, and closed the question. It did

Three post-quantum KEMs now sit inside one of the principal international standards for asymmetric encryption: ML-KEM, Classic McEliece and FrodoKEM. Read that again. Not one algorithm. Three. From three different mathematical families. Why this matters before the detail. A standards body had a choice. It could have ratified the market's preferred answer, ML-KEM, and closed the question. It did not. It standardised a structured lattice scheme, an unstructured lattice scheme a