Working Groups

Members

The PKI Consortium brings together leading organizations committed to trustworthy digital identities and secure communication.

Browse all members →

Working GroupsPQCPQC Maturity Model (PQCMM)Maturity Levels

0 — None

A product at Level 0 has no post-quantum cryptography integrated into the product. The organization might be in the preparation phase, but nothing has matured to the actual product.

Model overview · 0 — None · 1 — Initial · 2 — Foundational · 3 — Advanced · 4 — Managed · 5 — Optimized

Level 0 means no quantum-safe capabilities are available yet. Discovery and preparation may be underway, but this is the baseline entry point for supply-chain questionnaires.

Criteria

A product is at Level 0 when the following are true:

Criterion 0.1.1

The quantum readiness journey has not yet started or is still in a very early phase.

Criterion 0.1.2

No quantum-safe algorithm is available in any release channel available to customers, including beta, preview, or experimental.

Assessment questions

Supplier Intake Questions

Question 0.2.1

By what date do you expect to reach Level 1 — with at least one quantum-safe algorithm available for evaluation?

Question 0.2.2

Is a Software Bill of Materials (SBOM) or Cryptographic Bill of Materials (CBOM) available for this product in SPDX or CycloneDX format?

Question 0.2.3

Have you assigned a role or team responsible for the PQC migration of this product?

Question 0.2.4

Have you published a statement of direction or roadmap for PQC for this product?

Evidence checklist

Have a suggestion? Select text to suggest a change, or give feedback (opens in a new tab).

(opens in a new tab)