Germany's new guidance targets delayed decryption risks and long replacement cycles for legacy systems, requiring critical infrastructure operators to include post-quantum readiness in formal risk management
Sensitive information can remain exposed long after the systems protecting it were installed. Germany's new national guidance addresses that gap by setting out a migration framework for post-quantum cryptography (PQC) across public and private digital infrastructure.
Migration risks
The guidelines focus on two pressures: sensitive data that could be captured now and decrypted later, and legacy systems that may take a long time to replace. The concern is about future exposure and the difficulty of changing established infrastructure; the announcement does not report that RSA or elliptic-curve cryptography (ECC) has been broken.
The German Federal Ministry for Digital and State Modernization (BMDS) and the Federal Ministry of the Interior (BMI) published the document jointly with the Federal Office for Information Security (BSI). Its title is "Leitlinie zur Umstellung auf PQC". BSI's official press release presents the framework as Germany's implementation of the European Union's "Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography," adopted by NIS Workstream member states in June 2025.
The European context includes coordination among EU member states and broader cybersecurity programmes. The European Cybersecurity Competence Centre's key-document list includes the Digital Europe work programme for 2025-2027. That programme is a funding and coordination document; it is distinct from a legally binding EU-wide deadline for adopting PQC. The German framework links its migration planning to the European roadmap while setting out national guidance.
Hybrid cryptography
The guidelines emphasize crypto-agility: the ability to update cryptographic algorithms and key lengths without disrupting the underlying system architecture. That capability matters during a migration, when networks and services may not all be ready to change at the same time.
For immediate planning, the document calls for compliance with Technical Guideline BSI TR-02102 and emphasizes hybrid mechanisms. These pair classical algorithms with PQC algorithms standardized by the National Institute of Standards and Technology (NIST). The announcement does not name particular algorithms or give performance comparisons, so it does not establish which configurations operators should select for specific systems.
BSI also points to advances in artificial intelligence as accelerating security research and attack methods against classical public-key encryption. The announcement gives no specific attack, AI system, or test result. That distinction matters: the rationale for preparing cryptographic infrastructure is not evidence that an AI system or a quantum computer has already defeated RSA or ECC.
Risk management duties
Section 30 of the BSI Act (BSIG) requires operators of critical and essential infrastructure to incorporate PQC readiness into their formal risk management frameworks. This places migration planning within a defined risk process for those operators. The supplied announcement does not extend that statutory requirement to every private organization.
The framework therefore connects technical preparation with infrastructure risk management. It also reflects the practical challenge of replacing cryptographic systems embedded in services that cannot necessarily be upgraded all at once. The guidance identifies the need for readiness and hybrid mechanisms, but the announcement supplies no implementation deadline, transition schedule, cost estimate, or measure of how many systems are prepared.
What is established
The confirmed action is publication of joint national guidance that operationalizes an EU roadmap. The source describes a policy framework, not a new cryptographic algorithm or a laboratory demonstration. It reports no measured performance, deployment results, independent evaluation, or evidence that the recommended migration has been completed.
The distinction also separates this policy from other quantum technology work. For example, a Wisconsin sensing consortium concerns GPS-independent navigation, while the German guidance addresses cryptographic readiness. Both relate to the quantum sector, but they describe different technical problems.
Hybrid cryptography combines a classical algorithm with a post-quantum algorithm in a cryptographic mechanism. In this guidance, the pairing is a migration measure: it allows the framework to specify both types of algorithm while systems prepare for PQC. The document's emphasis on crypto-agility addresses the related ability to change algorithms or key lengths without redesigning the underlying architecture.
