June 10, 2028is our estimate for Q‑Day
Quantum computers are not powerful enough to break modern encryption. But progress is accelerating. If you're responsible for security at your organization, now is the time to prepare.
What breaks and when
Internet security
Crypto wallets
Internet security
Crypto wallets
How the largest chains plan to migrate
Where each chain stands
Bitcoin
Draft proposalBIP-360 proposes Pay-to-Merkle-Root (P2MR), a new output type that removes Taproot's exposed key-path spend. It does not add post-quantum signatures. The separate, draft BIP-361 proposes a phased migration away from ECDSA and Schnorr signatures, and depends on a post-quantum signature BIP that does not yet exist. Neither has activated.
Ethereum
In developmentThe Ethereum Foundation is developing a staged migration across accounts, validator consensus, and data availability, including account abstraction for gradual wallet upgrades (EIP-8141, scheduled for the Hegotá upgrade). Its post-quantum team estimates core L1 upgrades could be completed by 2029, with migration of accounts and applications taking years longer.
Solana
Under evaluationAnza and Firedancer have each written initial Falcon signature implementations, though neither is part of a client release. Blueshift's Winternitz Vault offers an optional hash-based protection; it does not make ordinary SOL wallets quantum-resistant. No network-wide activation date has been set.
Global Regulations
| Authority | Source |
|---|---|
| Australia | ACSC Planning for Post-Quantum Cryptography |
| US · NIST | EO: Securing the Nation Against Advanced Cryptographic Attacks |
| US · NSA | NSA CNSA 2.0 FAQ |
| European Union | EU Post-Quantum Cybersecurity Reinforcement |
| United Kingdom | NCSC PQC Migration Timelines |
| Japan | Japan NCO 2035 PQC Transition Timeline |
| South Korea | South Korea PQC Pilot Expansion |
| Canada | Official CSE Migration Roadmap |
| France | ANSSI Views on the Post-Quantum Cryptography Transition |
| China | Institute of Commercial Cryptography Standards (ICCS) |
Technology companies are preparing
| Post-quantum encryption in use | Post-quantum signatures available | Completion target | |
|---|---|---|---|
| 2029 | |||
| Cloudflare | 2029 | ||
| Microsoft | 2029 | ||
| Apple | — | ||
| AWS | — | ||
| Meta | — | — | |
| IBM | — | — | — |
Solution Providers
Post-quantum cryptography
- QuSecure
- Post-quantum secure communication stack (QuProtect) and quantum-safe VPNs for federal and enterprise networks.
- BTQ Technologies
- Post-quantum cryptography software and hardware, including quantum-safe blockchain infrastructure and PQC libraries.
- Project Eleven
- Post-quantum cryptography for digital assets, protecting wallets and blockchain infrastructure against quantum-enabled key recovery.
- Arqit
- Symmetric key agreement and quantum-safe encryption platforms for governments, defense, and enterprise.
Quantum key distribution
- IonQ
- Quantum key distribution (QKD) to secure communications and build the foundation of a global quantum internet, including through its acquisition of ID Quantique.
- Toshiba Europe
- QKD and quantum-safe metro-area networks with commercialized multiplexed QKD chips.
- Aliro Quantum
- Quantum network orchestration and software-defined QKD network design.
Quantum randomness and hybrid
- QuintessenceLabs
- Quantum entropy as a service (QRNG) and PQC + QKD hybrid solutions integrated into Thales HSMs.
