UK NCSC migration timeline
Direct answerThe UK NCSC's timeline, published 2025-03-20, sets three phases: complete discovery and planning by 2028, complete high-priority migrations by 2031, and complete the migration of all systems, services, and products by 2035.
- Issued by
- UK National Cyber Security Centre
- Date
- 2025-03-20
- Status
- Published guidance
- Source
- https://www.ncsc.gov.uk/guidance/pqc-migration-timelines
Milestones
- 2028Discovery complete: cryptographic inventory and migration plan
- 2031High-priority migrations complete
- 2035Migration complete for all systems, services, and products
Notes
- NCSC recommends ML-KEM-768/1024, ML-DSA-65/87, and SLH-DSA, and prefers pure post-quantum over hybrid in the long run.
Algorithms this timeline points to
ML-KEM, ML-DSA, SLH-DSA, FN-DSA, HQC, LMS / HSS, XMSS / XMSS^MT
Who can help you meet it
Cryptography audit firms listed on this index: zkSecurity, Trail of Bits, NCC Group (Cryptography Services), Cryspen, Kudelski Security, Quarkslab, Least Authority, Galois, atsec information security, Riscure (Keysight), Cure53, X41 D-Sec. See the audit checklist for what a migration review covers.