PQC Migration Advisor

Choose the cryptographic algorithms you use today and instantly get practical guidance on quantum risk and migration paths. Your selections across public-key (RSA, ECC, DH), digital signatures, symmetric ciphers, and hashes are mapped to recommended post-quantum options (e.g., ML-KEM, ML-DSA, SLH-DSA), hybrid strategies (e.g., TLS 1.3 classical+PQC), and near-term hardening steps (modern hashes, strong AEAD, key sizes). You’ll see concise explanations, trade-offs, and references – plus one-click PDF and Print for sharing with stakeholders. All logic runs in your browser; no data is stored on the server.

In October 2026 I rebuilt the Advisor with 63 algorithms, 18 protocol families, and 20 jurisdictions and regulatory regimes. For what changed, why, and how to read the report, see my guide to the rebuilt PQC Migration Advisor.

Disclaimer: Educational guidance only – validate decisions with your crypto/security team and current standards.

Select the cryptographic algorithms you use and where you use them. You get a report on which are exposed to quantum attack, what replaces each one, the deadlines that apply to you and what to do first.

Built on the Applied Quantum PQC Migration Framework v3.0. Knowledge base reviewed 18 October 2026. Everything runs in your browser: your selections are not sent anywhere or stored.

Start from a typical profile

1. Algorithms you use

Tick every algorithm you know is in use. Not sure? Start from a profile above, or ask your teams for the algorithms in your TLS, VPN, PKI and key-management configurations.

Key establishment and public-key encryption

Agreeing or transporting keys: TLS and VPN key exchange, SSH, key wrapping, encrypted email. Exposed to harvest-now-decrypt-later.

Digital signatures

Certificates, code and firmware, tokens, documents and transactions. Forgeable once a CRQC exists (trust-now-forge-later).

Symmetric encryption

Bulk encryption. Grover's algorithm gives at most a quadratic speed-up; no algorithm transition is needed.

Hashes and MACs

Integrity, MACs and key derivation.

Post-quantum and hybrid algorithms already in use

Check parameter sets, standard status and policy fit.

2. Where you use them (optional)

Tick where you use them to get guidance for each protocol family and the actions that apply to it.

3. Your context (optional)

Answer these for deadlines, validation rules and timing checks that fit your organization.

Choose a sector to get its notes and, for six sectors, a link to the matching framework extension.

Deployment environment

Do your systems need FIPS-validated cryptography?

Jurisdictions and regimes

Americas

Europe

Asia-Pacific

Middle East

Global

Time horizons

In years, for the timing checks at the top of the report. Leave any you are unsure of on "Not sure".

For example: session data, under a year; customer and financial records, 5–10 years; health, legal, intellectual property or state secrets, 25 years or more.

For example: TLS certificates, under a year; firmware roots in devices, 10–20 years; signed contracts and archives, 10–30 years.

Framework v3.0: IT refresh cycles typically run 3–7 years; embedded and OT systems 15–40.

Framework v3.0 puts a large enterprise at 4–15 years of execution.

Not a prediction. 2035 is the year named in the NIST IR 8547 draft, NCSC UK's timelines, the EU roadmap and NSM-10; each is described in the report's method notes. Pick an earlier year to stress-test your plan, or see Predicting Q-Day.

PQC Migration Advisor v2.0.1 · knowledge base reviewed 18 October 2026 · deadlines for every jurisdiction on the Global PQC Migration Clock.

From the author
Quantum Academy – training and certification for the quantum workforce