Germany Sets 2030 and 2035 Post-Quantum Migration Targets
Germany has set a firm deadline for phasing out classical cryptography within its public sector. The Federal Ministry of the Interior (BMI), the Federal Ministry for Digital Affairs and State Modernization (BMDS), and the Federal Office for Information Security (BSI) jointly issued a national guideline. This guideline outlines the implementation of the EU roadmap for post-quantum cryptography (PQC), establishing two key deadlines: high-risk systems must transition to quantum-safe methods by the end of 2030, with the broader transition largely completed by 2035.
This development transforms PQC from a theoretical concern into a time-bound planning imperative. German agencies, regulated companies, and critical infrastructure operators now have a framework detailing responsibilities, deadlines, and BSI-approved methodologies.
What Makes Germany’s Guideline Unique
This guideline emerged from an EU member state initiative recommending a coordinated shift to quantum-safe cryptography across the bloc. Germany’s version confirms European timelines and specifies national responsibilities and schedules.
A distinguishing feature of Germany’s approach is its technical baseline, detailed separately in BSI’s TR-02102-1. Though the US and several EU states primarily reference NIST standards, BSI directs implementers to use a hybrid construction: a NIST lattice algorithm paired with a second code-based or conservative scheme. The October release is joint federal migration guidelines aligned with the EU roadmap. The technical rules themselves stem from TR-02102-1, Version 2026-01, dated January 23, 2026.
Scope of the BSI Guideline
The guideline applies to federal, state, and local governments, as well as organizations and companies, including critical infrastructure operators.
For private entities, the scope is linked to German law. DuoKey points to the BSI Act (BSIG) as the legal basis for extending BSI’s technical expectations to regulated sectors. Teams should consult the TR-02102-1 criteria directly to determine if their systems fall within scope.
The ML-KEM plus FrodoKEM Hybrid Requirement
BSI’s guidance for key establishment emphasizes hybrid approaches. The recommended pattern combines ML-KEM, the NIST lattice-based standard (FIPS 203), with FrodoKEM, a more conservative lattice scheme. This ensures that a vulnerability in one method does not compromise the session key. BSI’s public page on quantum-safe cryptography confirms its general preference for hybrid key agreement during the transition period.
Signatures must adhere to the NIST standards accepted by BSI, including ML-DSA, SLH-DSA, and the stateful hash-based XMSS for firmware and long-lived signing. The available sources do not confirm whether FrodoKEM is mandatory in all key-establishment scenarios or limited to specific protection levels. Implementers should review the TR text for precise combinations.
These are considered secure constructions, not unbreakable ones. PQC, QKD, and QRNG each serve distinct purposes; this guideline focuses on PQC algorithms operating on existing networks.
Deadlines, Sunset Dates, and the 2030/2031 Questions
The primary deadlines are the end of 2030 for high-risk systems and 2035 for others.
It’s important to note that the legal weight of these dates varies across sources. Encryption Consulting, a PQC consultancy, states that Germany’s dates are binding for federal agencies and regulated sectors, with classical-only key agreement expected to sunset around 2031. Whether a given date constitutes a procurement condition, regulatory requirement, or merely guidance depends on your specific sector. This should be verified against the official BSI text.
Germany’s Approach Compared to the EU, France, US, and Australia
The following deadline comparison is based on the Encryption Consulting roundup, which has a commercial interest in PQC migration services. Therefore, these cross-border dates should be considered a starting point rather than definitive facts.
- Germany: Hybrid ML-KEM plus FrodoKEM; high-risk migration by end of 2030, wider transition by 2035.
- United States: NIST IR 8547 proposes phasing out classical public-key cryptography starting 2030, with deprecation by 2035.
- EU: The NIS Cooperation Group recommended member states publish national strategies by the end of 2026. Europol’s findings and NIST IR 8547’s proposed 2030/2035 phaseout corroborate this for the EU.
A practical difference lies in the emphasis on hybrids. Germany mandates a more robust, “belt-and-suspenders” approach to key agreement than a pure NIST-standards reading would require. This could complicate interoperability with partners who only implement ML-KEM.
Practical PQC Migration Checklist
- Cryptographic Discovery: Inventory all public-key cryptography used in TLS, VPNs, code signing, and HSMs.
- System Scoring: Evaluate each system based on protection needs and data lifetime. Prioritize long-lived secrets vulnerable to “harvest-now-decrypt-later” attacks.
- Hybrid Support Planning: Verify if existing hardware and libraries support ML-KEM plus FrodoKEM key agreement.
- Vendor Contracts: Incorporate PQC requirements into vendor contracts, mandating crypto-agile firmware and a commitment to migration with specific dates.
- Crypto-Agility Controls: Implement controls that allow for the modification of key lengths and algorithms in response to evolving threat landscapes, a point highlighted by the guideline given rapid AI-assisted cryptanalysis.
Some operators are already taking action. Starknet has implemented quantum-resistant signatures on its network, indicating that hybrid and post-quantum constructions are moving beyond the planning stage into production systems.
Open Questions for Vendors and Cross-Border Teams
Several uncertainties remain. An official English translation of the full guideline is not yet available, so compliance reporting duties and potential penalties need to be confirmed against the original German text. The precise scope of the FrodoKEM mandate requires direct consultation of the TR. Furthermore, cross-border teams face significant interoperability challenges when German hybrid rules encounter partners using NIST-only stacks.
Where to Read More QNews PQC Coverage
Germany’s guideline provides federal agencies and regulated firms with a concrete impetus to initiate cryptographic discovery and hybrid planning now, rather than waiting until 2030. It is crucial to review the TR-02102-1 criteria before scoping your migration and to monitor how EU national strategies evolve through the end of 2026. For more in-depth reporting on PQC and quantum security, continue to follow QNews.
Learn more