Hi All
27 Dec 2025 – A new peer-reviewed study titled “Enterprise Migration to Post-Quantum Cryptography: Timeline Analysis and Strategic Frameworks” by independent researcher Robert Campbell has been published in the open-access journal Computers (MDPI).
This paper provides one of the most comprehensive analyses to date of how long it will take enterprises to fully migrate their cryptographic systems to post-quantum cryptography (PQC). The findings are striking, and very much aligned with what I’ve been saying for years: even under optimistic assumptions, small enterprises may need 5-7 years to complete the transition, medium enterprises 8-12 years, and large enterprises 12-15+ years.
Australia: 2030 deadline mandated
Rest of the world: 2035
These timelines far exceed many early expectations and underscore that the PQC migration is not a simple software update but a complex, multi-year transformation. The study situates these estimates in context – tying the migration challenge to broader strategic issues like Zero Trust architecture, crypto-agility, and the looming threat of quantum-enabled adversaries – and offers a sobering call to action for organizations to start preparing now.
https://postquantum.com/security-pqc/enterprise-pqc-migration-study/
So everyone buckle up and expect that HNDL and HNFL (Hack Now Forge Later) attacks are already happening today. So if you have any data which must remain confidential for at least five years, think about migrating to to the published Post Quantum Cryptography algorithms now.
Regards
Caute_Cautim
