In November 2025, Japan’s National Cyber Command Office (NCO) published an interim report concluding that all government agencies must complete their transition to post-quantum cryptography (PQC) by 2035. The timeline aligned Japan with similar deadlines adopted by the United States, the European Union, the United Kingdom, and Canada.
According to PQShield’s analysis, the report highlighted the immediate threat of “harvest now, decrypt later” attacks and outlined the ongoing work of CRYPTREC in determining the technical basis for government cryptographic measures. The NCO recommended both cryptographic agility and the use of hybrid PQ/T schemes combining post-quantum cryptography with traditional techniques during the transition period.
An inter-ministerial committee convened in June 2025 had set plans to formulate a PQC migration roadmap enabling government agencies to begin the transition. A formal national PQC roadmap was expected by May 2027.