2026GlobalStateofPost-Quantumand Cryptographic Security TrendsJANUARY2026SPONSOREDBYENTRUSTIndependentlyconductedbyPonemonIinstituteLLCENTRUSTPonemnSECURINGAWORLDINMOTIONINSTITUTE
ContentsForeword3IntroductionKevFindingsPost-Quantum:The Threat and the Readiness JourneyCrvotoaraohic.SecuritvandManaaementTrends in PKI and HSMsReaionalDifferencesMethodsLimitations2026 Global State of Post-Quantum and Cryptographic Security Trends,ENTRUST
FOREWORDCryptographic SecuritySat a Tippina PointCryptographic security has quietly become one of the most critical -and leastvisible-foundations of modern business. It underpins identity, access, dataprotection, and system availability across every digital interaction. Yet todaythat foundation is under unprecedented strain. External mandates, acceleratingthreat timelines and expandina crvptographic sprawl are converging faster thanmost oraanizations can adaptThisvear's study examines how organizationsbecome essential capabilities for resilience in theThe Quantum Threat IsHereButHowPreparedAreWe?Aaainst the backdrop ofrisingoperational straine post-quantum threat ads anew andurgentdimension. While PQ often dominates headlines, thereoarefortheeventualfailureoftudy shows it's colliding with existina cryptographicallenges-not replacing them.tnow, decryptlater'style attacksNIST post-quantum cryptographyof alobalrespondentsexpect the arrivalP relevant quantum computersthat wil breaktraditional public keyysuch asRSA and ECC within 10 years,sounding 51% forecasting that this wlanaae.Toaether.theseforcesarepon as five years.transformina crvptographicsecurity to atippingtion, alsoreferred to ascryptographic algorithmsrotection of our digital universeantum threat. General qlobalthe 2026 Global State of Post-Quantum and-priority systems must be-2031.with all systemsPonemon Institute to examine how organizations2035.Yet only36% of respondentsciteent policv and public-private coordinationDrawing on insights from 4,149 seniorIT, securityin quantum readiness as more than adequate todayand risk leaders, across the United States, Unite.Kingdom/Ireland,Canada, DACH, Indonesia, and,IntheU.S. the NSA,NIST, and CISAareallurgingSingapore, thereportreveals where readiness,organizations to start theirmigrationnow. The NSAsadvancina.where it isfallina behind.and whyhas advised that allU.S. national security systems wilvisibilitv. aovernance.and crvpto-aaility have3
Crypto-Agility Is the Foundation.of PQCMigrationFor organizations actively preparing for PQ, progress variessignificanty. Whilemany have begun building, cryptographic strategies,frfewerhave estabished,the foundational crypto-agility needed to executethose plans atscale.Of those activelypreparingforPQ.44%are building theircryptographic strategywhile32% are compiling theircryptographicnventoryand/orensuringorganizationcrypto-agilityThelatterreoresentsa5%vear-over-veardroogthatthe biggestchallenge to atininge today is a lack of crypto-aqility.implementedcrypto-agitystrategy, with another31%having a partially implemented one.pgraphic esta...
