Most organizations know they need to prepare for post-quantum cryptography. Far fewer know exactly where to start. Cryptography is embedded across applications, software libraries, certificates, protocols, cloud services, hardware, machine identities, and third-party products. Before an organization can replace quantum-vulnerable algorithms, it must first understand where they are used and which systems matter most.
The external timelines are becoming clearer. NIST finalized its first three principal PQC standards in 2024: ML-KEM for key establishment, and ML-DSA and SLH-DSA for digital signatures. The EU roadmap calls on Member States to begin their transition by the end of 2026 and move critical infrastructure as soon as possible, no later than 2030. In the United States, Executive Order 14412 and OMB Memorandum M-26-15 require a prioritized federal migration aimed at mitigating as much quantum risk as feasible by 31 December 2030.
These five steps can help turn those timelines into a manageable migration program.
1. Discover Where Cryptography Is Used
Start with a cryptographic inventory. Identify algorithms, keys, certificates, protocols, libraries, applications, hardware, cloud workloads, and machine identities. Include third-party software and services: a hidden RSA or ECC dependency in a supplier component can delay an otherwise well-planned migration.
Use Software Bills of Materials (SBOMs) and Cryptographic Bills of Materials (CBOMs) to improve visibility into external dependencies. Learn more about SBOMs and CBOMs in PQC migration.
2. Prioritize According to Risk
Migrating everything simultaneously creates unnecessary cost and disruption. Rank use cases by data sensitivity, business impact, exposure, technical complexity, and expected lifetime. Give early attention to high-value systems and information that must remain confidential for many years, because data collected today could be stored and decrypted later once a cryptographically relevant quantum computer becomes available.
Assign clear ownership, milestones, and decision rights. PQC migration is not only a cryptography project; it requires coordination across security, IT, architecture, procurement, product teams, and executive leadership.
3. Test Algorithms and Interoperability
There is no universal replacement pattern. Performance, key and signature sizes, memory requirements, latency, protocol support, and application constraints differ by use case. Test standardized algorithms in realistic environments and examine interoperability, certificate handling, lifecycle operations, and hybrid deployments—not only raw benchmark results.
Utimaco's free Quantum Protect Simulator enables development teams to evaluate ML-KEM, ML-DSA, LMS/HSS, and XMSS/XMSS-MT in their own environments before production deployment.
4. Protect the New Keys in Hardware
Changing the algorithm does not remove the need to protect private keys. Hardware Security Modules (HSMs) provide a tamper-resistant environment for key generation, storage, and lifecycle operations, reducing the exposure of sensitive key material.
Utimaco Quantum Protect works with the u.trust General Purpose HSM Se-Series and CSe-Series to support NIST-standardized ML-KEM and ML-DSA as well as stateful hash-based LMS/HSS and XMSS/XMSS-MT. Its application-package approach supports in-field activation, helping organizations introduce PQC capabilities without redesigning the complete trust infrastructure.
5. Design for Crypto-Agility
PQC migration will not be the final cryptographic change your organization faces. Crypto-agility means being able to update algorithms, keys, protocols, policies, and implementations without rebuilding entire systems or creating long periods of disruption.
Build algorithm abstraction, controlled update mechanisms, inventory maintenance, testing processes, and governance into the architecture now. That makes it easier to respond to future standards, vulnerabilities, or regulatory requirements.
Start with Visibility, Not Guesswork
A successful migration begins with discovery, follows a risk-based plan, validates choices through testing, protects keys in trusted hardware, and leaves systems ready for the next change. The organizations that treat PQC as a managed transformation—rather than a last-minute algorithm swap—will be in the strongest position to migrate securely and with less disruption.
Ready to assess your PQC readiness? Explore Utimaco's post-quantum cryptography solutions here or contact our experts to discuss a migration path for your environment.
Ready to Secure Your Digital Future?
Join over 500 global enterprises and government institutions who trust Utimaco for their critical security infrastructure.
Contact SalesYour download request(s):
Your download request(s):
About Utimaco's Downloads
Visit our Downloads section and select from resources such as brochures, data sheets, white papers and much more. You can view and save almost all of them directly (by clicking the download button).
For some documents, your e-mail address needs to be verified. The button contains an e-mail icon.
A click on such a button opens an online form which we kindly ask you to fill and submit. You can collect several downloads of this type and receive the links via e-mail by simply submitting one form for all of them. Your current collection is empty.