Quantum Academy is now open. Enroll in live online training – see the schedule.
Skip to content
Quantum Academy
Search Close search

Try a course name, a credential code such as PQCM, or an industry such as financial services.

Browse courses

PQC Migration Advisor

Select the algorithms an organization uses and get a post-quantum migration report: quantum exposure, replacements, timing checks, a prioritized action plan and the deadlines that apply.

The PQC Migration Advisor is a free browser tool for learning and planning the move to post-quantum cryptography. Its knowledge base has 63 algorithms, 18 protocol families, nine sectors, four deployment environments and 20 jurisdictions and regulatory regimes. Every finding in the report has a link to its primary source.

Learners can load one of eight starting profiles, from a bank to a utility, change one input at a time and compare the reports. In seven exercises with the Advisor, we walk through scenarios from sorting algorithms by quantum exposure to reading deadlines by legal status.

Marin Ivezic created the PQC Migration Advisor and first published it on PostQuantum.com. QuantumAcademy.com publishes it with permission from Marin Ivezic and PostQuantum.com.

Everything runs in your browser. Your selections are not sent anywhere or stored. To study the topics behind the report, start with our free Introduction to Quantum Security course or the Post-Quantum Certified Specialist (PQCS) program.

Educational guidance only. Check decisions with your cryptography and security teams against current standards.

Select the cryptographic algorithms you use and where you use them. You get a report on which are exposed to quantum attack, what replaces each one, the deadlines that apply to you and what to do first.

Built on the Applied Quantum PQC Migration Framework v3.0. Knowledge base reviewed 18 October 2026. Everything runs in your browser: your selections are not sent anywhere or stored.

Start from a typical profile

1. Algorithms you use

Tick every algorithm you know is in use. Not sure? Start from a profile above, or ask your teams for the algorithms in your TLS, VPN, PKI and key-management configurations.

Key establishment and public-key encryption

Agreeing or transporting keys: TLS and VPN key exchange, SSH, key wrapping, encrypted email. Exposed to harvest-now-decrypt-later.

Digital signatures

Certificates, code and firmware, tokens, documents and transactions. Forgeable once a CRQC exists (trust-now-forge-later).

Symmetric encryption

Bulk encryption. Grover's algorithm gives at most a quadratic speed-up; no algorithm transition is needed.

Hashes and MACs

Integrity, MACs and key derivation.

Post-quantum and hybrid algorithms already in use

Check parameter sets, standard status and policy fit.

2. Where you use them (optional)

Tick where you use them to get guidance for each protocol family and the actions that apply to it.

3. Your context (optional)

Answer these for deadlines, validation rules and timing checks that fit your organization.

Choose a sector to get its notes and, for six sectors, a link to the matching framework extension.

Deployment environment

Do your systems need FIPS-validated cryptography?

Jurisdictions and regimes

Americas

Europe

Asia-Pacific

Middle East

Global

Time horizons

In years, for the timing checks at the top of the report. Leave any you are unsure of on "Not sure".

For example: session data, under a year; customer and financial records, 5–10 years; health, legal, intellectual property or state secrets, 25 years or more.

For example: TLS certificates, under a year; firmware roots in devices, 10–20 years; signed contracts and archives, 10–30 years.

Framework v3.0: IT refresh cycles typically run 3–7 years; embedded and OT systems 15–40.

Framework v3.0 puts a large enterprise at 4–15 years of execution.

Not a prediction. 2035 is the year named in the NIST IR 8547 draft, NCSC UK's timelines, the EU roadmap and NSM-10; each is described in the report's method notes. Pick an earlier year to stress-test your plan, or see Predicting Q-Day.

PQC Migration Advisor v2.0.1 · knowledge base reviewed 18 October 2026 · deadlines for every jurisdiction on the Global PQC Migration Clock.