Skip to content
CertGPS

Post-Quantum Cryptography Certifications: What Exists and What the Migration Work Needs

Domain guide

NIST's post-quantum standards are final and its draft deadlines run to 2035, but credentials are thin. What exists, what the work involves and what to learn.

Published
Updated
Read time
5 min
C
CertGPS

Not independently reviewed

AI-assisted content. Editorial policy · Suggest a correction

On this page

Post-Quantum Cryptography Certifications: What Exists and What the Migration Work Needs

If a NIST draft holds, RSA and elliptic-curve algorithms at the 112-bit security strength become deprecated after 2030, and every quantum-vulnerable public-key algorithm in NIST's standards is disallowed after 2035. Getting there means finding, replacing and testing cryptography across a whole organization. The credentials haven't caught up: the one dedicated program we found opened in October 2026 from a private institute, and most of the rest are two-day course certificates.

Standards finished and standards still coming

NIST published its first three post-quantum standards on August 13, 2024. FIPS 203 specifies ML-KEM, derived from CRYSTALS-Kyber, for key establishment, which is the part that protects data in transit. FIPS 204 specifies ML-DSA, from CRYSTALS-Dilithium, as the main digital signature standard. FIPS 205 specifies SLH-DSA, from SPHINCS+, a hash-based signature scheme that NIST describes as a backup built on different mathematics. NIST's project page says the three "can and should be put into use now."

Two more are in progress. NIST lists the Falcon signature algorithm as under standardization, and on March 11, 2025 it selected HQC as a second key-establishment algorithm. HQC is built on error-correcting codes rather than the lattices behind ML-KEM, so a break in one family wouldn't take out both. NIST said then that it expected to finalize the HQC standard in 2027.

The deadlines behind the hiring

The 2030 and 2035 dates come from NIST IR 8547, Transition to Post-Quantum Cryptography Standards, released as an initial public draft on November 12, 2024. Its public comment period closed on January 10, 2025, and the CSRC page still lists it as a draft. For digital signatures, its Table 2 marks ECDSA and RSA at 112 bits of security strength "Deprecated after 2030" and "Disallowed after 2035", and the stronger parameter sets, along with EdDSA, "Disallowed after 2035". The report anchors the 2035 date to National Security Memorandum 10, which sets the goal of "mitigating as much of the quantum risk as is feasible by 2035."

Other governments use similar dates. The UK's National Cyber Security Centre published its migration timeline on March 20, 2025: by 2028, finish discovery and set migration goals; by 2031, complete the highest-priority migrations; by 2035, complete migration across all systems, services and products. In the US, CISA keeps a list of product categories that support or plan to support the post-quantum algorithms, which tells buyers what to start asking vendors about.

What the migration work involves

Most of the work is inventory and engineering, with very little quantum physics in it.

Discovery comes first. NIST's National Cybersecurity Center of Excellence devotes a volume of its draft practice guide, SP 1800-38, to cryptographic discovery. In practice that means finding every place an organization uses public-key cryptography: TLS libraries, VPNs, code signing, hardware security modules (HSMs), certificates baked into devices, and protocols buried in vendor products. Another volume covers interoperability and performance testing, which matters because post-quantum keys and signatures are larger than the ones they replace.

Then come the decisions. Which data has to stay confidential beyond the mid-2030s and should move first? Which systems can switch algorithms through configuration, and which need a code change or new hardware? Which vendors have a roadmap, and which don't answer? People who do this work well tend to have backgrounds in public key infrastructure (PKI), TLS, HSM operations or protocol engineering. We'd expect a hiring manager to weigh that background above any quantum credential.

For hands-on practice, the Open Quantum Safe project publishes liboqs, an open-source C library of post-quantum algorithms with integrations into common protocols. It's part of the Linux Foundation's Post-Quantum Cryptography Alliance, set up in February 2024. Building a test TLS connection with a post-quantum key exchange and measuring what breaks gives you better interview material than any course certificate.

The credentials on offer

Quantum Academy, run by the Post-Quantum Institute, opened on October 2, 2026, according to PostQuantum.com, a site run by the academy's founder, Marin Ivezic. It issues 11 credentials across four tracks. The post-quantum track runs from Post-Quantum Certified Specialist (PQCS) through Architect (PQCA) and Validator (PQCV) to Expert (PQCX), which is awarded automatically to holders of three of the others. The launch announcement lists PQCS as a 100-question, 150-minute proctored exam and PQCA and PQCV as 120 questions in 180 minutes, with exam fees of $599 or $699. The academy states that its certifications are "private, professional credentials" and "not government-issued licenses, accredited academic degrees, or academic credit." The program is weeks old, and we found no independent evidence of employer demand for it. We would wait for that evidence before paying for the credential.

The rest of the market is short training courses that carry the word "certified". Tonex, a training company, sells a two-day Certified Post-Quantum Cryptography Specialist (CPQCS) course ending in an exam with a 70% pass mark, alongside several similarly named quantum security courses. These are course certificates from a training provider, with no independent exam body behind them.

Catalog certifications that test cryptography

None of the certifications in our catalog is about post-quantum migration, but two now ask about it. CompTIA's SecurityX (CAS-005) includes post-quantum cryptography in its cryptography objective, next to homomorphic encryption and envelope encryption. The 2024 CISSP outline added quantum key distribution. Neither will make you a migration engineer, but both tell an employer you understand cryptography at the level the work assumes. Our analysis of quantum computing's effect on security careers looks at the job market side.

Where to put your time

  1. Read FIPS 203 and 204 for what changes in practice (key sizes, signature sizes, the move to key encapsulation) and the IR 8547 tables for the dates that apply to your sector.
  2. Run a cryptographic inventory on something you control, even a home lab, and write down every place RSA or elliptic-curve keys appear.
  3. Test a post-quantum or hybrid key exchange with liboqs and record what breaks.
  4. If your employer wants a credential, SecurityX or CISSP will carry further than a post-quantum certificate this year.

Sources (14)