Germany aligns its post-quantum migration with the EU timeline: 2030, then 2035

On October 12, in Bonn, the BSI (Germany's Federal Office for Information Security) published a long-awaited document. Signed together with the Interior Ministry (BMI) and the Ministry for Digital Affairs (BMDS), it applies the European timeline for moving to post-quantum cryptography, which is designed to withstand future quantum computers, at the national level.

Its dates are those of the coordinated roadmap adopted by member states in June 2025: end of 2030 for high-risk uses, 2035 for most of the rest.

Who is targeted, and how strongly?

The text is addressed to federal, regional and municipal administrations, but also to organizations and companies, including critical infrastructure operators. Its wording deserves a close reading.

For high-risk uses, the BSI writes that they “should” switch “as soon as possible” and that the migration “must be completed by the end of 2030 at the latest” (in German, soll, a “must” in the sense of a strong recommendation). For 2035, the verb becomes conditional again: the transition “should be largely completed.”

The press release does not present the document as legally binding. It calls it a “guidance framework.” According to the specialist site heise, however, the competent authorities are expected to turn these deadlines into binding requirements for administrations by the end of 2026.

What the text asks for in practice

The BSI press release lists several workstreams:

• appoint those responsible and set binding internal deadlines;
• build quantum risk into risk management;
• involve manufacturers and the supply chain early;
• design architectures, procurement and risk management so that algorithms or key lengths can be changed quickly, which is known as cryptographic agility.

According to heise, the guideline also recommends hybrid schemes, which combine a classical algorithm with a post-quantum one, and asks each organization to inventory its cryptographic components. The BSI justifies the urgency with another argument: AI is speeding up both security research and attacks on cryptography.

Plenty of dates, little that is new

heise is harsh: the useful content runs to about four pages and “offers little that is new.” The outlet also notes that the text does not mention the pilot projects required by the European roadmap, even though some already exist, such as the quantum-resistant electronic passport and ID card.

For a French company, the message is mainly one of convergence. After the Netherlands, Germany adopts the same European milestones. If you have customers or subsidiaries across the Rhine, expect cryptographic inventories and agility to start appearing in calls for tender. The BSI also has its own technical requirements: it recently advised against Classic McEliece.

The next milestone to watch is the end of 2026, by which each member state must have finalized its national roadmap.