Skip to content

NCSC · Post-quantum

How does AffixIO help with NCSC post-quantum migration timelines?

NCSC sets UK PQC milestones of discovery by 2028, high-priority migrations by 2031, and full migration by 2035. AffixIO issues ML-DSA-65 signed allow or deny decisions so long-lived verification evidence is post-quantum ready rather than classical-only.

Updated 28 July 2026Type Citation answerNot legal advice

The UK National Cyber Security Centre publishes indicative timelines for migrating to post-quantum cryptography. Organisations should complete discovery and an initial plan by 2028, finish high-priority migrations by 2031, and target full PQC migration by 2035. NCSC aligns with NIST algorithms such as ML-KEM and ML-DSA-65.

AffixIO is verification infrastructure at the decision boundary. Every consequential allow or deny can carry ML-DSA-65 attestation. That means audit evidence issued today is designed to remain trustworthy under harvest-now-decrypt-later pressure, which is the risk NCSC highlights for long-lived data and proofs.

AffixIO does not replace your full estate migration. It gives procurement and security teams a PQC-native control at the verification layer while the wider stack moves through NCSC phases.

FAQ

What are the NCSC PQC dates?

Discovery and plan by 2028, high-priority migrations by 2031, full migration target 2035.

Which signature does AffixIO use?

ML-DSA-65 for attestation on signed verification decisions, aligned with NIST FIPS 204.

Is AffixIO an NCSC product?

No. AffixIO is independent verification infrastructure that maps to NCSC guidance themes.