EU Unveils Roadmap for Post-Quantum Cryptography

The European Union released its official post-quantum cryptography roadmap on June 23, 2025, outlining a timeline for phasing out current encryption technologies in favor of solutions capable of withstanding quantum attacks. Experts warn that quantum computers could break most widely used encryption algorithms by 2035 or 2040, posing a serious threat to data security worldwide.

The EU’s strategy is structured into three key phases:

1. By 2026: Each member state must approve its own national roadmap.
2. By 2030: All systems classified as critical — including those related to defense, energy, finance, and health — must migrate to quantum-resistant cryptographic standards.
3. By 2035: The remaining systems across the EU are expected to complete the transition.

While the document offers detailed guidance on implementation stages and technical standards, it does not address funding nor does it propose shared financial support among member states — a potential challenge for countries with limited cybersecurity budgets.

The move positions the EU as one of the first major blocs to formalize a continent-wide transition to quantum-secure infrastructure, reflecting growing global concern over the cybersecurity risks posed by emerging quantum technologies.