The Post-Quantum Cryptography Alliance (PQCA) is happy to announce the creation of the Readiness Tracking Working Group. As the industry prepares for the transition to post-quantum safe ciphers, it can be challenging to find information regarding the PQC compatibility of common enterprise and consumer technology. The working group will coordinate community driven efforts to collect, verify and publish PQC readiness information. 

Why We Are Tracking Readiness

The transition to Post-Quantum Cryptography is one of the most significant cryptographic migrations in history. Many organizations are well into evaluating their risks, but there is a lack of centralized data detailing the PQC readiness of the hardware, software packages, and services that power so much of the modern world.

The Readiness Tracking Working Group (Tracking WG) was formed to address this gap. By providing a centralized resource for public input and cross-industry collaboration, the group aims to provide a reliable source of truth for the community.

Mission

The mission of the Readiness Tracking Working Group is to serve as a central repository for tracking the PQC readiness of common hardware, libraries, software packages, and other critical use cases.

Initial Focus: Cryptographic Libraries

While the group’s long-term goal is broad ecosystem coverage, early efforts will focus specifically on common cryptographic libraries. This foundational work is essential as these libraries are a primary implementation point for the ciphers used by many applications and services.

Full Scope

As information is provided by the community there are opportunities to cover more touch points where signatures and key exchange need to be updated. This may include:

• Cryptographic Libraries (OpenSSL, BoringSSL, BouncyCastle, …)
• Networking & Communication Hardware (Routers, switches, VPN gateways, …)
• Key management, Identity & Access (HSMs, FIDO Tokens, Certificate Authority / PKI software and appliances, …)
• Physical Security (Smart cards, Biometric & Badge Readers, …)
• Endpoints & IoT (Workstations / Servers, Smartphones, Tablets, Wearables, IoT, …)
• System & Enterprise Software (Operating Systems, Web Browsers and Server, Databases, …)
• Cloud Services & Infrastructure (Cloud Identity, Key Management, Backups, Storage, …)
• Firmware & Code-Signing Systems (Hardware roots of trust, TPMs, Code-signing, …)

Wherever possible, protocol status information will also be collected and reported on to help with scenarios where PQ key exchange has been defined and is supported, but signature details and support are still outstanding.

Operational Model

The Working Group will operate with a focus on transparency and community contribution:

• Centralized Repository: We will maintain markdown-based trackers in a dedicated ‘readiness tracking’ GitHub repository under the PQCA account.
• Vetting: To ensure data quality, all contributions via pull requests will be vetted by Working Group members, with two positive reviews from members representing different companies required for each commit.
• Data Standards: The group will define and evolve the data formats and acceptance criteria used for tracking.

Goals for the Next 12 Months

The working group has established several key milestones for its first year:

1. Establish Tracker Formats: Define the initial schema and format for the tracker pages to ensure consistency and readability. Initially we will use Markdown for ease and simplicity.
2. Mapping the Problem Space: Determine how to best categorize the ecosystem (e.g., hardware vs. software vs. libraries) to streamline the tracking process and ensure intuitive navigation and discovery.
3. Bootstrap the Effort: Leverage visibility from PQCA members to begin populating the trackers and informing public contributors.

Join the Effort

The Readiness Tracking Working Group is open to all individuals and organizations consistent with PQCA policies. We encourage developers, security researchers, and hardware vendors to participate in vetting and contributing data.

• Working Group Mailing List: https://lists.pqca.org/g/wg-readiness-tracking 
• GitHub Repository: https://github.com/PQCA/wg-readiness-tracking 
• Meeting Cadence: Every 2 weeks beginning May 21, 2026 [meeting link]

We welcome help ensuring that the global transition to a post-quantum world is supported by clear, accessible, and accurate data.