Post-Quantum Cryptography Market

Overview

The global Post-Quantum Cryptography Market was valued at USD 0.9 billion in 2025 and is projected to reach USD 14.5 billion by 2034, growing at a CAGR of 35.2% during the forecast period (2026–2034). The market growth is driven because governments, banks, telecom operators and technology providers must replace RSA and elliptic-curve cryptography before quantum computers can break them, and because attackers can store encrypted data today and decrypt it later. The market is shifting from research and pilot projects to funded, mandated migration programs. Early spending focused on testing and awareness, but buyers are now moving to cryptographic inventory, crypto-agility platforms and hybrid deployments that combine classical and post-quantum algorithms. Government initiatives such as the US Executive Order 14412 (June 2026), which sets 31 December 2030 for federal high-value systems to adopt post-quantum key establishment and 31 December 2031 for digital signatures, and the EU Coordinated Implementation Roadmap (June 2025), which asks Member States to start national transition plans by end-2026 and finish high-risk use cases by end-2030, are turning migration into a compliance requirement. North America held the largest share of the market in 2025, supported by US federal mandates, a dense base of cryptography and cybersecurity vendors, and early defense and financial-sector adoption. Asia-Pacific is expected to be the fastest-growing region during the forecast period, driven by national migration roadmaps in Japan, India, Singapore and Australia, and by rising semiconductor and telecom investment in China and South Korea.

Market Size & Share

Market Dynamics

KEY MARKET TREND:

Crypto-Agility and Hybrid Post-Quantum Deployment Emerging as a Transformational Trend

• Organizations are moving from one-time algorithm swaps to crypto-agility: building cryptographic inventories, including Cryptographic Bills of Materials (CBOM), and using platforms that let them change algorithms without rewriting applications. Standards bodies such as NIST and the IETF are shaping the rules for how this change is made.
• Hybrid key exchange, which pairs a classical algorithm such as X25519 with ML-KEM, has become the default for web and cloud traffic, and vendors are now extending the same approach to post-quantum certificates, digital signatures and hardware security modules.
• Vendors that combine discovery, certificate automation and HSM support in one platform are gaining an edge, which is increasing partnerships and acquisitions. Over the long term, crypto-agility is expected to become a standard requirement in procurement for security products.
• Cloudflare reported that 52% of human-generated web traffic on its network used post-quantum encryption in 2025, and in April 2026 said the share had passed 65% as it moved its target for full post-quantum security, including authentication, to 2029.

KEY MARKET DRIVER:

Government Mandates and Standardization Driving Post-Quantum Migration

• NIST finalized FIPS 203, 204 and 205 in August 2024 and selected HQC as a backup key-establishment algorithm in March 2025. Approved standards give buyers something specific to procure against, which removes the biggest barrier to spending.
• Data that must stay confidential for many years, such as government, health, financial and telecom records, is exposed to “harvest now, decrypt later” attacks. This is moving PQC from a research topic to a budget line, and procurement rules are passing down to contractors and suppliers.
• Roadmaps from the EU, UK, Canada, Australia, Japan, India and the G7 financial-sector group converge on deadlines between 2030 and 2035. Certification requirements such as FIPS 140-3 and Common Criteria are also creating demand for validated products, and the number of deadlines before 2031 is expected to keep spending on a steady upward path.
• The White House signed Executive Order 14412, “Securing the Nation Against Advanced Cryptographic Attacks”, setting 31 December 2030 as the deadline for federal high-value assets to move to post-quantum key establishment and 31 December 2031 for digital signatures, with requirements for federal contractors to follow NIST-approved PQC standards.

KEY MARKET OPPORTUNITY:

Growth of Cryptographic Discovery, Migration Services and PQC-as-a-Service Creating New Revenue Streams

• Most enterprises do not yet know where cryptography is used across their applications, devices and suppliers. Discovery and CBOM tools, risk assessment and managed migration are the first spending areas and are expected to open large recurring revenue pools.
• Long-life devices such as IoT, automotive, industrial control, satellites, payment cards and e-passports need PQC-ready secure elements and firmware signing. Chip makers are adding post-quantum support to security controllers and secure elements, opening a hardware segment that is still largely untapped.
• Subscription models such as PKI-as-a-service, HSM-as-a-service and cloud key management with post-quantum algorithms let smaller organizations migrate without large capital spending, which is attracting venture investment and acquirers into the sector.
• DigiCert’s 2026 Quantum Readiness Outlook reported that 87% of enterprises are planning, testing or executing PQC initiatives, but only 7% have deployed quantum-safe or hybrid cryptography in production; DigiCert made its Quantum Central platform generally available in September 2026 to address this gap.

Post-Quantum Cryptography Market Size, 2025-2034 (USD Billion)

Segmentation Analysis

Analysis by Algorithm Type

Lattice-based cryptography held the largest market share in 2025 because NIST chose lattice-based algorithms for its two main standards: ML-KEM (FIPS 203) for key exchange and ML-DSA (FIPS 204) for digital signatures. These algorithms offer a good balance of security, speed and key size, so vendors have built them into mainstream products, including Windows 11, Windows Server 2025, AWS Key Management Service and Cloudflare’s network. Hybrid key exchange that pairs a classical algorithm with ML-KEM is now the default approach for web and cloud traffic, giving lattice-based schemes the widest commercial deployment.

Hash-based cryptography is projected to grow at the fastest CAGR during the forecast period because stateful signatures such as LMS and XMSS, and the NIST-standardized SLH-DSA (FIPS 205), are among the most mature options for firmware and software signing. Their security rests on well-understood hash functions, which suits long-life devices, secure boot and code signing, and the NSA’s CNSA 2.0 timeline calls for early adoption in these uses. HSM suppliers are responding: Utimaco added LMS and XMSS support in 2025, and Thales’ Luna T-Series passed FIPS 140-3 validation covering LMS in 2026.

Algorithm Type categories include

                    ·           Lattice-Based Cryptography (Dominating Segment)

                    ·           Hash-Based Cryptography (Highest CAGR Segment)

                    ·           Code-Based Cryptography

                    ·           Multivariate Cryptography

Analysis by Component

Software held the largest market share in 2025 because most post-quantum deployments so far have been software upgrades to operating systems, cloud services, PKI platforms and network security products. Microsoft made ML-KEM and ML-DSA generally available in Windows Server 2025, Windows 11 and .NET 10 in November 2025, and Palo Alto Networks added a quantum readiness dashboard and cipher translation to PAN-OS 12.1 in 2025. Software can be updated without replacing hardware, and subscription licensing for certificate, discovery and key management platforms creates recurring revenue.

Services are projected to grow at the fastest CAGR during the forecast period because most organizations first need help finding where cryptography is used and planning the migration. US Executive Order 14412 and OMB Memorandum M-26-15 require federal agencies to inventory their cryptography and submit migration plans within 120 days, and the EU roadmap asks Member States to have national plans by the end of 2026. Cryptographic assessment, CBOM creation, migration planning, testing and managed PKI services are in demand because skilled staff are scarce.

Component categories include

                    ·           Software (Dominating Segment)

                    ·           Services (Highest CAGR Segment)

                    ·           Hardware

Analysis by Deployment

On-premises deployment held the largest market share in 2025 because government, defense, financial and telecom organizations keep key management and signing operations inside their own data centers and hardware security modules. Validated hardware matters for these buyers: Thales’ Luna T-Series passed FIPS 140-3 Level 3 validation with ML-DSA, ML-KEM and LMS in 2026, and Utimaco’s Quantum Protect adds CNSA 2.0 algorithms to its u.trust HSM. Air-gapped and classified environments cannot rely on public cloud services, and long hardware refresh cycles mean PQC-ready appliances are being bought now.

Cloud deployment is projected to grow at the fastest CAGR during the forecast period because major platforms are making post-quantum protection a default feature rather than a separate purchase. AWS supports ML-KEM hybrid key exchange in KMS, Certificate Manager, Secrets Manager, CloudFront and S3, and ML-DSA in KMS and Private CA, while Cloudflare reports that more than 65% of human traffic on its network already uses post-quantum encryption. Cloudflare has also said it will provide its post-quantum upgrades on every plan at no extra cost.

Deployment categories include

                    ·           On-Premises (Dominating Segment)

                    ·           Cloud (Highest CAGR Segment)

                    ·           Hybrid

Analysis by Application

Network security held the largest market share in 2025 because protecting data in transit is the most urgent use case: encrypted traffic can be recorded now and decrypted later. Hybrid key exchange has been rolled out across TLS, VPN and IPsec, and vendors are upgrading firewalls, routers and secure access products. Palo Alto Networks introduced 14 fifth-generation firewall models optimized for post-quantum processing in 2025, and Cisco’s IOS XE 26.1 and 26.2 releases added ML-KEM and ML-DSA support for IPsec tunnels. The NSA’s CNSA 2.0 and national roadmaps place network protocols among the first systems to migrate.

Digital signatures and PKI are projected to grow at the fastest CAGR during the forecast period because the industry is moving from protecting encryption to protecting authentication. In March 2026 Google said it would prioritize PQC migration for authentication services, and Cloudflare moved its full post-quantum target to 2029. Microsoft made ML-DSA certificate issuance available in Active Directory Certificate Services in 2026, and DigiCert Private CA already issues ML-DSA certificates. US Executive Order 14412 sets a 2031 deadline for post-quantum signatures in federal systems.

Application categories include

                    ·           Network Security (Dominating Segment)

                    ·           Digital Signatures & PKI (Highest CAGR Segment)

                    ·           Data Encryption & Storage Security

                    ·           Authentication & Access Management

                    ·           Others

By Region

Post-Quantum Cryptography Market Regional Analysis

Post-Quantum Cryptography Market Share 2025, (CAGR)

North America

40%

South America

XX%

Europe

28%

Middle East Africa

XX%

Asia Pacific

XX%

Regional Analysis

North America held the largest market share in 2025, accounting for 40% of global market share, because the United States has the most advanced policy framework and the densest base of PQC vendors. NIST finalized FIPS 203, 204 and 205 in 2024 and selected HQC in March 2025, while the NSA’s CNSA 2.0 timeline drives procurement for national security systems. On 22 June 2026, Executive Order 14412 set 2030 and 2031 deadlines for federal high-value assets and extended post-quantum requirements to federal contractors, and Canada’s roadmap requires departmental migration plans from April 2026 with completion by end-2035. Microsoft, IBM, Google, AWS, Cloudflare, Entrust, DigiCert, Keyfactor, SandboxAQ and Palo Alto Networks are US-headquartered and shipped PQC capabilities in 2025–2026. Major countries include the United States, Canada and Mexico.

Asia-Pacific is projected to grow at the fastest CAGR during the forecast period, with its share rising from 24% in 2025 to 32% by 2034. Governments are setting timelines: Japan’s National Cyber Command Office concluded in December 2025 that government agencies should finish PQC migration by 2035 and planned an engineering roadmap for fiscal 2026; India’s quantum-safe roadmap targets migration of critical information infrastructure in 2027–2029; Australia’s ASD expects classical asymmetric cryptography to be phased out by 2030; Singapore’s agencies published a quantum-safe migration handbook; and South Korea selected its own KpqC algorithms. Regional suppliers such as Samsung Electronics, whose S3SSE2A secure element adds hardware PQC, add depth to the supply base. Major countries include China, Japan, India, South Korea and Australia.

Countries and Regions Covered

Asia-Pacific (Fastest Growing Region)

o    China

o    India (Fastest-Growing Country Market)

o    Japan (Largest Country Market)

o    South Korea

o    Rest of Asia-Pacific

North America (Dominating Region)

o    United States (Largest Country Market)

o    Canada (Fastest-Growing Country Market)

o    Mexico

Europe

o    Germany (Largest Country Market)

o    United Kingdom

o    France

o    Italy

o    Rest of Europe

Latin America

o    Brazil (Largest Country Market)

o    Chile

o    Rest of Latin America

Middle East & Africa

o    United Arab Emirates (Largest Country Market)

o    Saudi Arabia (Fastest-Growing Country Market)

o    Rest of Middle East & Africa

Market Share

The market is fragmented because technology platforms such as IBM, Microsoft, Thales and Cloudflare, HSM and PKI specialists such as Entrust, DigiCert, Keyfactor and Utimaco, semiconductor companies such as Infineon Technologies and SEALSQ, and specialized providers such as PQShield, SandboxAQ, QuSecure, Sectigo and Crypto4A Technologies compete across different layers of the market, with no single company leading every layer. Competition is intensifying as government and EU migration timelines approach. Key success factors include support for NIST standards, FIPS 140-3 and Common Criteria certification, crypto-agility, interoperability with existing PKI and HSMs, and the ability to inventory cryptography at scale. Leading companies are prioritizing cryptographic discovery, hybrid and composite certificates, hardware roots of trust, and PQC-ready networking. Partnerships and acquisitions are also shaping the competitive landscape, including Keyfactor’s acquisitions of InfoSec Global and CipherInsights, Reliance Global’s acquisition of a controlling interest in Enquantum, and IonQ’s agreement to acquire Elisity.

Key Players

           ·           IBM (United States)

           ·           Thales (France)

           ·           Microsoft Corporation (United States)

           ·           Entrust Corporation (United States)

           ·           DigiCert, Inc. (United States)

           ·           Keyfactor Inc. (United States)

           ·           Utimaco GmbH (Germany)

           ·           Infineon Technologies AG (Germany)

           ·           Palo Alto Networks, Inc. (United States)

           ·           Cloudflare, Inc. (United States)

           ·           SandboxAQ (United States)

           ·           PQShield (United Kingdom)

           ·           QuSecure, Inc. (United States)

           ·           Sectigo (United States)

           ·           Crypto4A Technologies Inc. (Canada)

Recent Market Developments

• May 2025: Keyfactor announced the acquisition of InfoSec Global and CipherInsights, a cryptographic discovery solution from Quantum Xchange, adding discovery, posture monitoring and automated migration to quantum-safe certificates to its digital trust platform.
• March 2026: Google announced a 2029 timeline for completing its post-quantum cryptography migration, said it will prioritize authentication and digital signatures, and outlined plans to bring ML-DSA into Android’s hardware root of trust.
• July 2026: Thales Trusted Cyber Technologies announced that its PQC-enabled Luna T-Series HSMs achieved FIPS 140-3 Level 3 validation (certificate 5450), covering ML-DSA, ML-KEM and LMS, and said it is the first HSM to include all CNSA 2.0 PQC algorithms within a FIPS 140-3 validation.
• October 2026: IonQ signed a definitive agreement to acquire zero-trust cybersecurity firm Elisity in an all-stock deal valued at up to USD 1.3 billion, including up to USD 150 million of earn-outs, to combine its post-quantum and quantum key distribution technologies with zero-trust policy software. 

Frequently Asked Questions

Key Questions Answered

Request a Sample

1

What is Post-Quantum Cryptography?

2

What is the CAGR of the Post-Quantum Cryptography Market?

3

Which algorithm type leads the Post-Quantum Cryptography Market?

4

Which end user dominates the Post-Quantum Cryptography Market?

5

Which component is growing the fastest?

6

What are the latest trends in the Post-Quantum Cryptography Market?

7

Who are the end users of Post-Quantum Cryptography?

Why Choose IG Transformation

Speak to Analyst

Strong Industry Focus

Extensive Product Offerings

Customer Research Services

Robust Research Methodology

Comprehensive Reports

Latest Technological Developments

Value Chain Analysis

Potential Market Opportunities

Growth Dynamics

Quality Assurance

Post-sales Support

Regular Report Updates