{
  "slug": "uk-ncsc-pqc-timeline",
  "name": "UK NCSC migration timeline",
  "body": "UK National Cyber Security Centre",
  "date": "2025-03-20",
  "status": "Published guidance",
  "summary": "The UK NCSC's timeline, published 2025-03-20, sets three phases: complete discovery and planning by 2028, complete high-priority migrations by 2031, and complete the migration of all systems, services, and products by 2035.",
  "milestones": [
    [
      "2028",
      "Discovery complete: cryptographic inventory and migration plan"
    ],
    [
      "2031",
      "High-priority migrations complete"
    ],
    [
      "2035",
      "Migration complete for all systems, services, and products"
    ]
  ],
  "notes": [
    "NCSC recommends ML-KEM-768/1024, ML-DSA-65/87, and SLH-DSA, and prefers pure post-quantum over hybrid in the long run."
  ],
  "url": "https://www.ncsc.gov.uk/guidance/pqc-migration-timelines",
  "url_page": "https://pqaudit.org/timelines/uk-ncsc-pqc-timeline/",
  "updated": "2026-09-12"
}