PQC Migration Takes 3 to 5 Years. The Deadline Is 2030. Here's Where to Start.
Last updated July 8, 2026
Post-quantum cryptography, or PQC, refers to encryption algorithms designed to resist attacks from quantum computers. Today's standard approaches — RSA and elliptic curve cryptography (ECC) — will eventually be breakable by a sufficiently powerful quantum machine. Quantum-safe and quantum-resistant cryptography are terms used interchangeably with PQC; they all describe the same migration goal.
When Gartner projected in 2025 that "quantum computing will render traditional cryptography unsafe by 2029," it was an analyst warning. That warning has since become industry consensus. Google announced in March 2026 that it was targeting 2029 to secure its systems against quantum computers. Cloudflare followed within weeks with the same deadline. Microsoft announced in July 2026 that it was accelerating its own roadmap to 2029, citing new research showing quantum computers capable of breaking elliptic curve cryptography could require far fewer qubits than previously estimated. NIST, meanwhile, finalized its first three post-quantum cryptography standards — FIPS 203, 204, and 205 — in August 2024. The standards are no longer pending. The algorithms are chosen. The remaining question is operational.
But here's the challenge: most organizations don't even know all the cryptography they're using, where it's deployed, or which systems depend on vulnerable algorithms. You can't migrate what you can't see.
Axiad Mesh, built for Identity Visibility and Intelligence, solves the cryptographic discovery challenge that lies at the heart of PQC readiness.
How Urgent is the Quantum Threat to Cryptography?
Industry experts warn that the danger isn't waiting until 2029. Security leaders must anticipate attacks where adversaries collect encrypted data today and store it for future decryption once quantum computers become available. This means that sensitive data encrypted with current algorithms—even if it seems secure today—may be compromised tomorrow.
The scope of the problem is staggering. Asymmetric cryptography powers virtually every aspect of modern security: X.509 certificates, digital signatures, SSH keys, TLS/SSL connections, VPNs, code signing, identity and access management systems, and countless other critical functions. Unlike cryptographic hash functions that get updated relatively frequently, RSA and elliptic curve cryptography have been the foundation of digital security for over thirty years. Replacing them across an entire enterprise isn't a simple software patch, it's a fundamental transformation.
What is a Framework for Post Quantum Cryptography Migration?
Reports from Gartner, CISA, and NIST provide clear, actionable guidance for organizations preparing for the post-quantum era. Their recommendations can be distilled into five critical imperatives:
1. Create a Crypto Center of Excellence (CCOE)
Organizations need a dedicated team to assess scope, coordinate cryptographic policies, and provide expertise across development teams. This center becomes the command hub for a multi-year transformation program requiring cross-functional coordination.
2. Build a Comprehensive Cryptographic Inventory
This is the foundation of everything else. Organizations must construct an inventory documenting every cryptographic algorithm in use across the enterprise. This inventory must identify:
- What cryptographic algorithms are deployed
- Where they're being used (applications, systems, hardware)
- Which certificates and keys exist and where they're stored
- Key lengths, algorithm types, and certificate lifecycles
- Dependencies between systems and cryptographic implementations
- Vendor products that embed cryptography
Without this visibility, organizations cannot scope the impact of migration, prioritize risk remediation, or create realistic timelines.
3. Develop Clear Policies and Governance
Organizations need formal policies governing algorithm substitution, data retention aligned with quantum timelines, and the mechanics of cryptographic migration. This policy framework reduces confusion, eliminates arbitrary decisions, and increases manageability as organizations navigate the complex transition.
4. Implement Crypto-Agile Development Practices
Applications must be designed for cryptographic flexibility, enabling organizations to swap algorithms without massive re-engineering efforts. Organizations should test new post-quantum algorithms to understand their performance characteristics—which differ significantly from classical cryptography in key sizes, signature sizes, and computational requirements.
5. Start Immediately—No More Waiting
Organizations cannot afford to delay. Given that the average PQC migration is estimated to take years for mid-sized organizations, waiting even another year puts companies on a collision course with the 2029 deadline. Federal mandates are already in motion, with CISA requiring agencies to inventory cryptographic systems and plan automated discovery tool adoption.
The mandate landscape tightened significantly in 2026. Executive Order 14409, "Securing the Nation Against Advanced Cryptographic Attacks," signed on June 22, 2026, requires federal agencies to migrate high-value assets and high-impact systems to post-quantum cryptography for key establishment by December 31, 2030, and for digital signatures by December 31, 2031. That's a four-to-five-year acceleration from the prior 2035 target set by National Security Memorandum 10. Critically, the order also required each agency to name a PQC migration lead immediately — a signal that the administration views this as active operational work, not a planning exercise. For federal agencies and their contractors, these are now compliance deadlines, not recommendations. And given that NIST estimates a large-scale cryptographic migration takes three to five years once an organization is fully resourced, the math on when to start is not complicated.
What is the Cryptographic Inventory Problem for PQC Readiness? Why Are Most Organizations Stuck?
Here's where the reality hits: The entire framework hinges on that second step—building a comprehensive cryptographic inventory. Yet this is precisely where most organizations stall.
The challenge isn't just technical complexity, though that's substantial. The real obstacle is that cryptographic objects are distributed across:
- PKI infrastructure: Certificate authorities, registration authorities, validation services
- Identity systems: Authentication mechanisms, SSO implementations, federation protocols
- Application layer: Embedded cryptography in custom and commercial software
- Network layer: VPN concentrators, load balancers, API gateways
- Endpoint devices: Laptops, servers, IoT devices, mobile devices
- Cloud environments: Multi-cloud cryptographic implementations and key management services
- Machine identities: Service accounts, API keys, SSH keys, code signing certificates
Traditional discovery tools struggle because cryptography is woven throughout the entire digital fabric of modern enterprises. Point solutions that scan networks miss embedded cryptography. Application security tools that examine code don't see infrastructure-level certificates. PKI management platforms don't extend to application-layer cryptographic libraries.
What organizations need is unified visibility that spans human identities, machine identities, and the cryptographic credentials that secure them all. This is where Axiad Mesh fundamentally changes the equation.
What's Changed Since This Post Was Written
This post was originally published in January 2026. Several significant developments have occurred since then that sharpen the urgency and the regulatory picture.
The 2029 timeline is now industry consensus, not just an analyst projection. In March 2026, Google announced it was targeting 2029 to complete its own post-quantum cryptography transition. Cloudflare announced the same deadline shortly after. In July 2026, Microsoft followed, accelerating its internal roadmap to 2029 as well, citing new research showing breakthroughs in quantum algorithms that reduce the hardware requirements needed to break elliptic curve cryptography. Three organizations with massive cryptographic infrastructure independently landing on the same revised year is a meaningful signal.
A new federal executive order put hard deadlines on migration. Executive Order 14409, signed June 22, 2026, set December 2030 and December 2031 as the migration deadlines for federal high-value assets — four to five years ahead of the prior 2035 target. For federal agencies and contractors, PQC readiness is now a compliance requirement with a fixed date, not a best practice.
The harvest-now-decrypt-later window keeps growing. Every month that passes without a completed cryptographic inventory is another month of encrypted data that could be sitting in an adversary's collection waiting for quantum computing to catch up. The exposure isn't theoretical — it's accumulating.
How Can Axiad Mesh Accelerate PQC Readiness?
Axiad Mesh was built to solve the inventory problem that analysts identify as a critical step in PQC migration. As an Identity Visibility and Intelligence Platform (IVIP), Axiad Mesh provides the comprehensive cryptographic inventory that organizations need to move quickly on PQC readiness.
Unified Cryptographic Discovery Across Your Entire Identity Infrastructure
Axiad Mesh doesn't just discover identities, it discovers and inventories the cryptographic assets associated with those identities across your organization:
- Certificate discovery across PKI infrastructure: Axiad Mesh provides visibility into X.509 certificates across traditional PKI systems, cloud-based certificate authorities, and hybrid environments. This includes digital certificates for users, devices, applications, and services.
- Machine identity cryptography inventory: Axiad Mesh delivers critical visibility into API keys, service account credentials, SSH keys, and the cryptographic methods securing machine-to-machine communications.
- Integration with existing identity systems: Rather than requiring rip-and-replace, Axiad Mesh integrates with existing identity providers, access management systems, and asset management systems to create a unified cryptographic inventory without disrupting operations.
Automated Discovery at Enterprise Scale
Manual cryptographic inventories are both time-consuming and incomplete. Axiad Mesh automates discovery, continuously scanning your environment to identify:
- Certificate types, key lengths, and signature algorithms
- Certificate lifecycles, expiration dates, and renewal status
- Issuing authorities and certificate chains
- Weak cryptography that requires prioritized remediation
- Orphaned or unused cryptographic credentials
- Dependencies and relationships between identities and certificates
This automation dramatically compresses the timeline for creating Gartner's recommended inventory. Where manual efforts might take months or years, Axiad Mesh delivers comprehensive visibility in weeks.
Risk-Based Prioritization for PQC Migration
Not all cryptographic implementations pose equal risk. Axiad Mesh applies AI/ML-powered analytics to assess and prioritize cryptographic vulnerabilities based on:
- Algorithm weakness: Identifying RSA, ECC, and other quantum-vulnerable algorithms
- Key strength: Flagging certificates with insufficient key lengths
- Certificate lifecycle risk: Highlighting certificates nearing expiration that should be renewed with quantum-safe alternatives
- Identity criticality: Prioritizing high-privilege accounts and critical machine identities
- Data sensitivity: Focusing on cryptography protecting sensitive or long-lived data
This risk intelligence enables organizations to make informed decisions about migration sequencing, focusing resources where quantum threats pose the greatest danger.
Real-Time Visibility and Continuous Monitoring
PQC migration isn't a one-time project—it's a multi-year transformation requiring continuous visibility. Axiad Mesh provides real-time monitoring and alerts, ensuring that as new systems come online, new certificates are issued, or cryptographic configurations change, your inventory remains current and complete.
This ongoing visibility is essential for a crypto-agile approach, enabling organizations to track migration progress, identify new quantum-vulnerable cryptography as it's introduced, and maintain comprehensive oversight throughout the transition.
Bridging Identity and Cryptography
Here's what makes Axiad Mesh unique: it understands that cryptographic credentials don't exist in isolation—they're intrinsically linked to identities. A certificate belongs to a user, a device, or a service. An API key authenticates a specific application. An open source library is part of an application and was used by a developer. Understanding these relationships is critical for:
- Impact analysis: Determining which users and systems are affected by cryptographic vulnerabilities
- Ownership attribution: Identifying who's responsible for remediating specific cryptographic issues
- Dependency mapping: Understanding how cryptographic changes will ripple through interconnected systems
- Coordinated migration: Ensuring that identity lifecycle events (user departures, role changes) trigger appropriate cryptographic credential updates
By correlating identity data with cryptographic inventories, Axiad Mesh provides the contextual intelligence that transforms raw discovery data into actionable migration roadmaps.
The Cost of Delay Is Exponential
The Gartner article compares PQC migration to Y2K, but the analogy understates the challenge. Y2K had a fixed deadline and a known problem (two-digit year fields). PQC migration faces:
- Uncertainty about the quantum timeline: Breakthroughs could accelerate the threat
- No drop-in replacements: New algorithms have different performance profiles
- Vendor unpreparedness: Most vendors haven't prioritized PQC upgrades
- Legacy system constraints: Embedded systems and hardware may require replacement, not just updates
Organizations that begin comprehensive cryptographic discovery today give themselves 4-9 years for migration. Those who delay another year or two may find themselves attempting a decade-long migration in just 2-3 years—a recipe for incomplete transitions, security gaps, and operational disruptions.
What is the Axiad Mesh Difference? Speed Meets Comprehensiveness
What sets Axiad Mesh apart in the PQC readiness landscape is the combination of:
- Breadth of coverage: From human identities to machine identities to cryptographic credentials, all in one platform
- Depth of insight: Not just discovering what exists, but understanding relationships, risks, and priorities
- Speed of deployment: Weeks to comprehensive visibility, not months or years
- Continuity of operation: No rip-and-replace; Axiad Mesh integrates with existing infrastructure
For organizations facing the 2029 deadline, Axiad Mesh compresses the timeline for the most critical and time-consuming phase of PQC readiness: understanding what you have and where it is.
Start Your PQC Journey with Clarity, Not Confusion
The message is clear: the quantum threat is real, the timeline is short, and organizations must begin transitioning to post-quantum cryptography immediately.
But you can't migrate what you can't see. Axiad Mesh transforms daunting PQC migration recommendations into an achievable roadmap by solving the foundational challenge of cryptographic visibility. With automated discovery, AI-powered risk assessment, and unified identity-cryptographic correlation, Axiad Mesh enables organizations to:
- Build their cryptographic inventory in weeks, not years
- Prioritize quantum-vulnerable systems based on actual risk
- Track migration progress with real-time visibility
- Meet federal mandates for automated cryptographic discovery
- Establish the foundation for long-term crypto-agility
The quantum era is coming. The question isn't whether your organization needs to prepare—it's whether you'll have the visibility necessary to prepare effectively.
Learn More About Axiad Mesh for PQC Readiness
Ready to accelerate your post-quantum cryptography readiness with the visibility and intelligence you need? Axiad Mesh provides the comprehensive identity and cryptographic discovery capabilities that Gartner identifies as essential for PQC migration success.
Contact us today to learn how Axiad Mesh can help your organization build the cryptographic inventory foundation for a quantum-safe future: www.axiad.ai/contact
Explore Axiad Mesh: Discover how the original Identity Visibility and Intelligence Platform extends to cryptographic discovery and PQC readiness: www.axiad.ai/axiad-mesh
Quick Answers
What is post-quantum cryptography (PQC) readiness?Post-quantum cryptography readiness is the state of being prepared to migrate an organization's encryption, certificates, and key exchange methods to algorithms that can withstand attacks from quantum computers. It starts with building a complete inventory of cryptographic assets, then prioritizing and replacing the ones most at risk. PQC is also called quantum-safe or quantum-resistant cryptography.
When will quantum computers break today's encryption?Gartner projected in 2025 that conventional asymmetric cryptography will become unsafe by 2029. Since then, Google, Cloudflare, and Microsoft have all independently moved their internal migration targets to 2029, citing new quantum computing research that suggests the hardware requirements to break today's encryption are lower than previously estimated. NIST has set federal compliance deadlines of 2030 and 2031 for high-value government systems.
What is harvest now, decrypt later?Harvest now, decrypt later describes the practice of collecting encrypted data today with the intention of decrypting it once a sufficiently powerful quantum computer exists. It means that sensitive data protected by today's RSA and ECC algorithms may already be at risk — not because quantum computers can break it today, but because adversaries are banking on being able to do so in the future. This is why PQC migration cannot wait until quantum computers are widely available.
What is the first step in a PQC migration?The first step is building a cryptographic inventory: a complete, current record of every certificate, key, and encryption algorithm in use across your environment, along with which system or identity owns each one. Without that inventory there is no way to scope the migration, prioritize risk remediation, or create a realistic timeline. Most organizations find this harder than expected because cryptographic assets are scattered across PKI infrastructure, machine identities, application layers, and cloud environments with no single system of record.
What are the NIST post-quantum cryptography standards?NIST finalized its first three post-quantum cryptography standards in August 2024: FIPS 203 (ML-KEM, for key encapsulation), FIPS 204 (ML-DSA, for digital signatures), and FIPS 205 (SLH-DSA, a stateless hash-based signature scheme). These are the quantum-resistant algorithms that organizations are expected to migrate toward as they replace RSA and ECC-based cryptography.
******************
Additional Resources
Gartner Public Article: "Post-Quantum Cryptography Is a Must to Protect Your Systems" - Available at gartner.com/en/articles/post-quantum-cryptography (Published July 22, 2025)
CISA: "Strategy for Migrating to Automated Post-Quantum Cryptography Discovery and Inventory Tools" (September 2024)
NIST: Post-Quantum Cryptography Standardization (ongoing)