L'Allemagne publie sa ligne directrice nationale pour la feuille de route post-quantique de l'UE : systèmes à haut risque d'ici la fin de 2030, le reste d'ici 2035

On October 12, 2026 the German Federal Ministry of the Interior (BMI), the Federal Ministry for Digital Affairs and State Modernization (BMDS) and the Federal Office for Information Security (BSI) released a national guideline for carrying out the EU roadmap on post-quantum cryptography. The document is written for federal, state and municipal governments and for organizations and companies, with critical infrastructure operators named explicitly.

The guideline confirms the European timeline rather than softening it: high risk use cases should move to quantum-safe methods as early as possible and no later than the end of 2030, and the whole transition should be largely complete by 2035. The recommended measures are the familiar ones done properly: clear responsibilities and binding deadlines, post-quantum cryptography applied to the current state of the art, quantum risk assessed systematically and anchored in risk management, and manufacturers and supply chains brought in early. Crypto agility is singled out: architectures, procurement and risk processes should allow algorithms and key lengths to be swapped quickly and under control.

Our take

Canada has set the same two dates. ITSM.40.001 asks for high priority systems by the end of 2031 and everything by 2035, and the G7 call to action Canada co-signed in September points the same way. Germany's guideline is useful to a Canadian operator for one reason: it shows what a national regulator expects to see on paper, starting with an inventory and named owners. You can't fix what you can't see. Start your Discovery Program.