Post-Quantum Cryptography (PQC) Market Size, Share, Trends & Growth Opportunities Forecast to 2026 - 2035

Post-Quantum Cryptography (PQC) Market Size, Share & Trends Report, 2026–2035

LAST UPDATED: NOVEMBER 2026

Post-quantum cryptography (PQC), also called quantum-safe or quantum-resistant cryptography, refers to public-key algorithms that remain secure against attacks by large-scale quantum computers. A sufficiently powerful quantum computer running Shor’s algorithm could break RSA, Diffie-Hellman and elliptic-curve cryptography, which protect almost all of today’s internet traffic, payments, digital identities and software updates. PQC algorithms are based on mathematical problems, such as structured lattices and hash functions, that quantum computers are not known to solve efficiently.

Because PQC runs on existing processors, networks and secure chips, it can be rolled out through software libraries, firmware, hardware security modules (HSMs), PKI and certificate platforms. With NIST’s FIPS 203, 204 and 205 standards in place since 2024 and binding migration deadlines now set in the U.S., Europe and the U.K., the post-quantum cryptography market has moved from research and pilots to large-scale enterprise and government migration.

PQC Market Key Takeaways

Infographic: Post-Quantum Cryptography (PQC) Market Size, Share, Trends & Growth Opportunities Forecast to 2026 - 2035 | Ameco Research

PQC Market Report Scope

How Big Is the Post-Quantum Cryptography Market in 2026?

Ameco Research estimates the post-quantum cryptography market at USD 0.84 billion in 2026, up about 45% from USD 0.58 billion in 2025. Growth accelerated after the U.S. issued Executive Order 14412 in June 2026 and NIST finalized its transition roadmap, NIST IR 8547, in October 2026, turning PQC from a long-term plan into a budgeted compliance program. The market is expected to pass USD 3 billion by 2030, reaching about USD 3.25 billion, and climb to USD 17.58 billion by 2035, when quantum-vulnerable algorithms are disallowed.

Latest PQC Market Trends 2026

PQC Market Dynamics

Growth drivers

• Government mandates: U.S. EO 14412, NSA CNSA 2.0, the EU coordinated PQC roadmap and the U.K. NCSC 2035 migration timeline create firm deadlines and budgets.
• “Harvest now, decrypt later” attacks: sensitive data stolen today can be decrypted later, so long-lived financial, health, defense and intellectual property data must be protected now.
• Finalized standards: NIST FIPS 203, 204 and 205 give vendors and buyers stable algorithms to build into products and FIPS 140 validated modules.
• Progress in quantum computing: new research has sharply lowered the estimated number of qubits needed to break RSA-2048, shortening expected “Q-Day” timelines.
• Long-lived devices: vehicles, satellites, smart meters, medical devices and payment cards deployed today must remain secure for 10 to 20 years.

Restraints and challenges

• Migration complexity: cryptography is embedded in thousands of applications, protocols, devices and third-party products, making full migration a multi-year effort.
• Performance and size: PQC keys and signatures are larger than RSA and ECC, which can affect constrained devices, network packets and certificate chains.
• Skills shortage: few security teams have hands-on PQC experience, raising reliance on consultants.
• Budget competition: without a visible near-term attack, some organizations delay spending in favor of other security priorities.
• Evolving standards: FN-DSA (FIPS 206) and HQC are still being finalized, and some protocols await updated specifications.

Opportunities

• Cryptographic discovery and CBOM tools to map quantum-vulnerable assets across large enterprises.
• PQC migration services for governments, federal contractors, banks and critical infrastructure operators.
• Quantum-safe hardware including HSMs, secure elements, TPMs and PQC-ready microcontrollers.
• Telecom and 5G/6G security as operators upgrade VPNs, SIM cards and core networks.
• PQC as a service through cloud key management, managed PKI and quantum-safe VPN offerings.

PQC Market Segment Analysis

By offering: Why are PQC services growing fastest?

Solutions accounted for 68.3% of revenue in 2025, about USD 0.40 billion, covering quantum-safe hardware, software libraries, PKI platforms and network security products. Services, including cryptographic risk assessment, inventory, migration planning, integration and managed services, held 31.7% and are the fastest-growing offering at about a 42.6% CAGR, as federal agencies, contractors and banks prepare compliance-driven migration plans.

By solution type

Quantum-safe hardware, including HSMs, secure elements, TPMs and PQC-enabled chips, led solution revenue with 34.6% in 2025. PQC software libraries and toolkits held 27.2%, cryptographic discovery, PKI and crypto-agility platforms 21.4%, and quantum-safe network security, such as VPNs, TLS gateways and secure messaging, 16.8%. Discovery and crypto-agility platforms are growing fastest.

By algorithm type

Lattice-based algorithms, including ML-KEM, ML-DSA and FN-DSA, accounted for 78.5% of the market in 2025 because they offer the best balance of speed and key size and form the core of NIST’s standards. Hash-based signatures such as SLH-DSA, LMS and XMSS held 13.2%, mainly for firmware and code signing. Code-based schemes such as HQC and Classic McEliece held 5.1%, and multivariate and other algorithms 3.2%.

By deployment mode and organization size

On-premises deployments held 56.4% of revenue in 2025, reflecting the use of HSMs and private PKI in banks, governments and defense. Cloud deployments, at 43.6%, are growing faster as AWS, Google Cloud, Microsoft Azure and Cloudflare add PQC to key management, load balancers and TLS endpoints. Large enterprises accounted for 74.8% of spending, while small and medium-sized enterprises (25.2%) mainly adopt PQC through cloud and managed services.

By vertical: Which industry leads PQC adoption?

BFSI was the largest vertical with 27.4% of revenue in 2025, as banks protect long-lived customer data, payment networks and interbank messaging. Government and defense followed with 24.9%, driven by national mandates and classified systems. IT and telecom, with 18.6%, is the fastest-growing vertical at about a 43.8% CAGR. Healthcare held 8.1%, energy and utilities 6.3%, automotive 5.2% and other verticals 9.5%.

PQC Market Regional Analysis

Why does North America lead the PQC market?

North America accounted for about 45.8% of revenue in 2025. The U.S. has the most detailed migration requirements, from the Quantum Computing Cybersecurity Preparedness Act and NSA CNSA 2.0 to Executive Order 14412 and NIST IR 8547, and its federal contractor rules extend these deadlines to suppliers. The region is also home to many leading PQC, PKI, cloud and quantum companies, including IBM, DigiCert, Keyfactor, SandboxAQ, QuSecure, AWS, Google, Microsoft and Cloudflare.

What makes Asia Pacific the fastest-growing region?

Asia Pacific held about 20.7% of the market in 2025 and is forecast to grow at a 44.9% CAGR. China is developing its own national post-quantum algorithms, South Korea has selected domestic PQC standards, Japan and Singapore have issued financial-sector migration guidance, and India’s National Quantum Mission is funding quantum-safe communications. Large banking, telecom and electronics manufacturing industries add further demand.

How is Europe developing?

Europe represented about 26.4% of revenue in 2025. The EU’s coordinated implementation roadmap calls on member states to begin the transition by the end of 2026 and to protect critical infrastructure by 2030, while the U.K. NCSC targets full migration by 2035. Germany’s BSI and France’s ANSSI also recommend hybrid PQC, and European vendors such as Thales, Utimaco, Infineon, IDEMIA and PQShield play a major role.

PQC Market Segmentation

PQC Market Leading Companies

The post-quantum cryptography market combines established security vendors, specialist PQC companies, chipmakers and cloud platforms. Thales, Entrust and Utimaco lead in quantum-safe HSMs; DigiCert, Keyfactor and Entrust in PQC-ready PKI and certificate management; PQShield and SandboxAQ in PQC IP, discovery and migration tools; NXP, Infineon, IDEMIA and SEALSQ in PQC-enabled chips and secure elements; and IBM, AWS, Google, Microsoft and Cloudflare in large-scale deployment of quantum-safe cloud and network services.

IBM · Thales · Entrust · DigiCert · Keyfactor · Utimaco · PQShield · SandboxAQ · NXP Semiconductors · Infineon Technologies · IDEMIA Secure Transactions · SEALSQ · QuSecure · Palo Alto Networks · Amazon Web Services (AWS) · Google · Microsoft · Cloudflare

Recent developments

• October 2026: NIST finalized IR 8547, its PQC transition roadmap, which deprecates quantum-vulnerable RSA and elliptic-curve algorithms after 2030 and disallows them after 2035.
• October 2026: IonQ agreed to acquire Zero Trust security company Elisity for up to USD 1.3 billion to combine post-quantum and network security.
• July 2026: Keyfactor announced more than USD 1 billion in growth investment led by Summit Partners to expand its post-quantum PKI and certificate platform.
• June 2026: The U.S. President signed Executive Order 14412, setting 2030 and 2031 deadlines for PQC key establishment and digital signatures in high-value federal systems.
• November 2025: Microsoft made ML-KEM and ML-DSA generally available in Windows 11, Windows Server 2025 and .NET 10.
• April 2025: OpenSSL 3.5 added native support for ML-KEM, ML-DSA and SLH-DSA, with hybrid post-quantum key exchange as a default TLS option.
• March 2025: NIST selected HQC as a fifth post-quantum algorithm and backup to ML-KEM for key establishment.

PQC Market: Frequently Asked Questions